TomTom Forensics

[lasvegascop]

Hi.. I currently have a Tom Tom One that I must do a forensic (or as forensic as possible) examination on.
I would like to know
1. what are the important files that I need to examine?
2. is there any way to see the address of saved favorites? In other words, if the bad guy saves favorite as "bank". Haw can I get the address of that "bank" with out starting up the GPS and retracing the route? On my Garmin I can see the address of favorited but not on the TomTom.
3. Is there any file that lists the way points in a format that I could download as a csv or similar format and import it into google earth or streets and trips to map out the suspects last trips?

Upon looking at the files on the GPS it appears that the data is encrypted.

[Billard]

Hi all,

I just received a tomtom for examination.
I'm interested in finding routes, points of interest, etc.
Did you succeeded in finding something on yours?

Take care,

David.

[BuMobiles]

Hi all,

I just received a tomtom for examination.
I'm interested in finding routes, points of interest, etc.
Did you succeeded in finding something on yours?

Take care,

David.

All routes, favourties, home address are all stored in a file inside the maps folder :rolleyes:

[Disklabs]

Billard,

expand a little will you? what is the file, format etc?

I am sure other forum members would love to know.

Regards,

Simon