MOBILE FORENSICS

Forensic analysis of Google Chrome on Android

Google Chrome is one of the most widely used browsers on Android devices. As part of an IT forensic investigation, browser artefacts can provide important clues about internet usage, downloads, search queries and the chronological sequence of events.

Browser history
Downloads
Cookies
Cache files
Autofill and form data
Saved bookmarks
Session information and tabs
SQLite databases
Timestamps and metadata
Synchronisation information

TECHNICAL BACKGROUND

Technical Fundamentals

Chrome stores a great deal of information locally on the Android device.

Forensically relevant artefacts include, amongst others:

  • •Browser history
  • •Downloads
  • •Cookies
  • •Cache files
  • •Autofill and form data
  • •Saved bookmarks
  • •Session information and tabs
  • •SQLite databases
  • •Timestamps and metadata
  • •Synchronisation information

Storage locations and data structures may vary depending on the version of Android and Chrome.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Following a suitable forensic data backup, browser databases, cache files, cookies and other Chrome artefacts are analysed using recognised IT forensic tools and manual analysis. Timestamps and metadata are correlated with other technical findings. All stages of the investigation are fully documented.
2
LanCologne produces expert reports for private individuals, as well as for companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, we can provide anonymised or redacted sample reports or extracts.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔Which websites were visited?
  • ✔Which files were downloaded?
  • ✔Which search queries can be traced?
  • ✔What time-related information is available?
  • ✔How meaningful are browser artefacts?

LIMITATIONS & CONCLUSION

What you should know

Deleted browser data, private browsing, synchronisation settings or data overwrites may affect the range of artefacts available. Conclusions are drawn solely on the basis of the technical data actually available.

Analysis of Google Chrome often provides valuable insights into the use of an Android device. Only a comprehensive analysis of all available browser artefacts enables a well-founded technical assessment.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have Google Chrome data on an Android device professionally examined? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Which browser data is particularly relevant?
These include, amongst other things, browser history, downloads, cookies, the cache and SQLite databases.
Can deleted browser data be recovered?
That depends on the data set and the artefacts available.
Are timestamps analysed?
Yes. Time-related information plays an important role in reconstructing events.
Is synchronisation data relevant?
Yes. Depending on the configuration, they may provide additional technical information.
Could an expert report be drawn up on this matter?
Yes. The test results are documented in a clear and transparent manner and assessed from a technical perspective.