Wi-Fi Network Preferences (com.apple.wifi.plist)

Location

Description

Property list file containing Wi-Fi configuration preferences including auto-join settings, hotspot configuration, network service ordering, and historical connection metadata. This file works in conjunction with the known-networks plist to manage wireless network behavior and stores additional connection preference data not present in the known-networks database.

Forensic Value

Wi-Fi preferences reveal network connection priorities and auto-join configurations that establish which networks the device connects to automatically, indicating frequently visited locations. Hotspot configuration data may reveal tethering activity between devices. Network service ordering shows the user preferred connectivity methods. Changes to Wi-Fi preferences can indicate network configuration manipulation by an attacker seeking to redirect traffic through a controlled access point. This artifact complements the known-networks plist with additional configuration context.

Tools Required