Skip to content

Add iOS WiFi Known Networks Parser#4922

Closed
CopasAlpha26 wants to merge 1 commit intolog2timeline:mainfrom
CopasAlpha26:add-ios-wifi-known-networks-parser
Closed

Add iOS WiFi Known Networks Parser#4922
CopasAlpha26 wants to merge 1 commit intolog2timeline:mainfrom
CopasAlpha26:add-ios-wifi-known-networks-parser

Conversation

@CopasAlpha26
Copy link

One line description of pull request

Add a parser for iOS WiFi Known Networks plist file

Description:

This Pull Request introduces a new parser for processing the com.apple.wifi.known-networks.plist file, commonly found on iOS devices.

Key Features:

  • Extracts information about WiFi networks previously connected by an iOS device, including:
    • SSID: Name of the WiFi network.
    • BSSID: MAC address of the WiFi access point.
    • Channel: Channel on which the WiFi operates.
    • Last Associated Time: Timestamp of the last connection to the network.

Purpose:

  • Enables forensic investigators to analyze WiFi activity on iOS devices.
  • Useful for timeline analysis and correlation of user activity with WiFi networks.

Included Changes:

  • A new parser: ios_wifi_known_networks.py, located in parsers/plist_plugins/.
  • Unit tests for the parser, located in tests/parsers/plist_plugins/.

Testing:

  • The parser was tested with sample com.apple.wifi.known-networks.plist files.
  • Tests validate the extraction of SSID, BSSID, channel, and timestamps.

No new dependencies were added as part of this change.

Related issue (if applicable): fixes #

Notes:

All contributions to Plaso undergo code review.
This makes sure that the code has appropriate test coverage and conforms to the
Plaso style guide.

One of the maintainers will examine your code, and may request changes. Check off the items below in
order, and then a maintainer will review your code.

Checklist:

  • Automated checks (GitHub Actions, AppVeyor) pass
  • No new new dependencies are required or l2tdevtools has been updated
  • Reviewer assigned

@CopasAlpha26 CopasAlpha26 deleted the add-ios-wifi-known-networks-parser branch November 23, 2024 01:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant