MOBILE FORENSICS

Forensic analysis of Google Maps on Android

Google Maps is one of the most widely used navigation and mapping apps on Android devices. As part of a digital forensics investigation, location data and other artefacts can provide important insights into a user’s movements and how the device was used.

Search history
Navigation destinations and routes
Saved places and favourites
Offline maps
Cache files
Timestamps and metadata
SQLite databases
Synchronisation information
Location history (timeline), where available

TECHNICAL BACKGROUND

Technical Fundamentals

Depending on your settings and synchronisation preferences, Google Maps stores various types of information both locally on your device and in connection with a Google account.

Forensically relevant artefacts include, amongst others:

  • •Search history
  • •Navigation destinations and routes
  • •Saved places and favourites
  • •Offline maps
  • •Cache files
  • •Timestamps and metadata
  • •SQLite databases
  • •Synchronisation information
  • •Location history (timeline), where available

The availability and scope of the data depend on the Android version, the app version and the privacy settings.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Following a suitable forensic data backup, local databases, cache files, metadata and other Google Maps artefacts are analysed using recognised IT forensic tools and manual analysis. All stages of the investigation are documented in a transparent manner and assessed solely on the basis of objective technical findings.
2
LanCologne produces expert reports for private individuals, as well as for companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, we can provide anonymised or redacted sample reports or extracts.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔Which places were searched for?
  • ✔Which navigation destinations were used?
  • ✔What time-related information is available?
  • ✔Which site-specific artefacts can be technically verified?
  • ✔How reliable is the available data?

LIMITATIONS & CONCLUSION

What you should know

Location services that are not enabled, deleted data, disabled synchronisation or missing permissions may limit the range of artefacts available. Statements are made solely on the basis of the technical data actually available.

Google Maps can provide valuable insights into location and movement data as part of an Android forensic investigation. Only a comprehensive analysis of all available artefacts enables a reliable technical assessment.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have Google Maps data professionally examined on an Android device? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Is the location history always available?
No. It depends on the settings for the Google account and the app.
Can search queries be analysed?
Yes. Depending on the data source, search histories can be analysed using technical means.
Are offline maps relevant from a forensic perspective?
Yes. You can allow the app to collect data on its usage.
Are timestamps analysed?
Yes. Time-related information is particularly important for reconstructing events.
Could an expert report be drawn up on this matter?
Yes. The results are documented in a transparent manner and assessed from a technical perspective.