Skip to content

Preferred Network List (PNL)

Definition

The list of previously joined Wi-Fi networks stored on a client device. The device automatically probes for networks on the PNL when scanning. Recovered from device storage during acquisition, the PNL reveals a history of networks the device has joined and the locations associated with them.

Related terms

BSSID
Basic Service Set Identifier. The MAC address of a specific access point radio. Used in association logs and packet captures to uniquely...
MAC address randomisation
A privacy mechanism in modern operating systems that substitutes a randomly generated MAC address for the device's globally unique burned-in address during...
Monitor mode
An 802.11 radio mode that captures every wireless frame in range, including management and control frames, without associating to an access point....
Probe request
An 802.11 management frame broadcast by a client device when actively scanning for Wi-Fi networks. Contains the device MAC address and, in...
RSSI
Received Signal Strength Indicator. A value, typically expressed in dBm, recorded in access-point logs and packet captures that indicates how strongly a...

Explained in

  • Wi-Fi ForensicsThe list of previously joined Wi-Fi networks stored on a client device. The device automatically probes for networks on the PNL when scanning. Recovered from d...

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.