Apologies in advance for the length of the information below. For forensics students who do not have the iPhone tools but would still like to do an educational explore. Have a look at the logs below and see what you can find. As "plists" are often referred to here is a selection, to start with, that you may wish to search the logs:
WiFi connections history:
/private/var/Preferences/SystemConfiguration/com.apple.network.identification.plist
Known WiFi networks list:
/private/var/Preferences/SystemConfiguration/com.apple.wifi.plist
IMSI/ICCID data:
/private/var/mobile/Library/Preferences/com.apple.commcenter.plist
Installed applications list:
/private/var/mobile/Library/Preferences/com.apple.springboard.plist
Last displayed map:
/private/var/mobile/Library/Maps/Directions.plist
Background to data below. Gary has an iPhone 4S. Gary produces Console Logs. Gary then posts said Logs on internet (http://www.tumblr.com/tagged/5-?before=1319870943)
==== Attached at 10/26/2011 7:08:14 PM ====
Oct 26 19:07:53 unknown lockdownd[22]
Oct 26 19:07:53 unknown lockdownd[22]
Oct 26 19:07:53 unknown com.apple.BTServer[66]
Oct 26 19:07:53 unknown wifiFirmwareLoader[30]
Oct 26 19:07:53 unknown wifiFirmwareLoader[30]
Oct 26 19:07:53 unknown wifiFirmwareLoader[30]
Oct 26 19:07:53 unknown wifiFirmwareLoader[30]
Oct 26 19:07:53 unknown lockdownd[22]
Oct 26 19:07:53 unknown lockdownd[22]
Oct 26 19:07:53 unknown lockdownd[22]
Oct 26 19:07:54 unknown wifiFirmwareLoader[30]
Oct 26 19:07:54 unknown configd[14]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown kernel[0]
Oct 26 19:07:54 unknown lockdownd[22]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.imagent[49]
Oct 26 19:07:55 unknown imagent[49]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown kernel[0]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown lockdownd[22]
Oct 26 19:07:55 unknown com.apple.BTServer[66]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:55 unknown com.apple.networkd[72]
Oct 26 19:07:55 unknown SpringBoard[15]
Oct 26 19:07:56 unknown SpringBoard[15]
Oct 26 19:07:56 unknown CLTM[12]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown timed[32]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown kernel[0]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown softwareupdated[38]
Oct 26 19:07:56 unknown hpfd[51]
Oct 26 19:07:56 unknown OTACrashCopier[62]
Oct 26 19:07:56 unknown mstreamd[44]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:56 unknown com.apple.BTServer[66]
Oct 26 19:07:57 unknown mediaserverd[45]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown kernel[0]
Oct 26 19:07:57 unknown hpfd[51]
Oct 26 19:07:57 unknown com.apple.misd[63]
Oct 26 19:07:57 unknown hpfd[51]
Oct 26 19:07:57 unknown hpfd[51]
Oct 26 19:07:57 unknown wifid[29]
Oct 26 19:07:58 unknown locationd[28]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown kernel[0]
Oct 26 19:07:58 unknown SpringBoard[15]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown com.apple.CommCenter[17]
Oct 26 19:07:59 unknown com.apple.CommCenter[17]
Oct 26 19:07:59 unknown CommCenter[17]
Oct 26 19:07:59 unknown CommCenter[17]
Oct 26 19:07:59 unknown wifid[29]
Oct 26 19:07:59 unknown CommCenter[17]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:07:59 unknown kernel[0]
Oct 26 19:08:00 unknown SpringBoard[15]
Oct 26 19:08:01 unknown lockdownd[22]
Oct 26 19:08:02 unknown lockdownd[22]
Oct 26 19:08:03 unknown kernel[0]
Oct 26 19:08:03 unknown kernel[0]
Oct 26 19:08:03 unknown configd[14]
Oct 26 19:08:03 unknown configd[14]
Oct 26 19:08:03 unknown wifid[29]
Oct 26 19:08:03 unknown configd[14]
Oct 26 19:08:03 unknown lockdownd[22]
Oct 26 19:08:03 unknown aggregated[61]
Oct 26 19:08:03 unknown aggregated[61]
Oct 26 19:08:03 unknown SpringBoard[15]
Oct 26 19:08:03 unknown SpringBoard[15]
Oct 26 19:08:03 unknown SpringBoard[15]
Oct 26 19:08:04 unknown lockdownd[22]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:04 unknown SpringBoard[15]
Oct 26 19:08:05 unknown SpringBoard[15]
Oct 26 19:08:05 unknown SpringBoard[15]
Oct 26 19:08:05 unknown kernel[0]
Oct 26 19:08:05 unknown lockdownd[22]
Oct 26 19:08:05 unknown MobileMail[82]
Oct 26 19:08:05 unknown MobileMail[82]
Oct 26 19:08:06 unknown MRMLowDiskUEA[12]
Oct 26 19:08:06 unknown MRMLowDiskUEA[12]
Oct 26 19:08:06 unknown lockdownd[22]
Oct 26 19:08:06 unknown wifid[29]
Oct 26 19:08:06 unknown lockdownd[22]
Oct 26 19:08:06 unknown lockdownd[22]
Oct 26 19:08:06 unknown dataaccessd[54]
Oct 26 19:08:06 unknown MobileMail[82]
Oct 26 19:08:06 unknown wifid[29]