MOBILE FORENSICS
Forensic analysis of Google Photos on Android
Google Photos is used to manage, back up and synchronise photos and videos. During an Android forensic investigation, local files and – depending on the data set – synchronised files can provide important clues about how a device has been used.
TECHNICAL BACKGROUND
Technical Fundamentals
Forensically relevant artefacts may include, amongst other things:
- •Local image and video files
- •EXIF metadata (e.g. time taken and GPS, where available)
- •Thumbnails
- •Cache files
- •SQLite databases
- •Synchronisation information
- •Shared albums
- •Recycle bin information
- •Timestamps and metadata
The data available depends on the app settings, the version of Android and whether the app is synchronised with your Google account.
OUR APPROACH
This is how your examination will be carried out
A transparent process – from the initial enquiry to the handover of the report.
TYPICAL QUESTIONS
When is this analysis required?
- ✔Which photos and videos are stored locally?
- ✔What EXIF metadata is available?
- ✔What types of synchronisation artefacts are there?
- ✔Is it technically possible to recover deleted media?
- ✔How significant are the existing artefacts?
LIMITATIONS & CONCLUSION
What you should know
Deleted files, disabled synchronisation, missing EXIF data or overwritten files may limit the amount of information available. Any conclusions are drawn solely on the basis of the technical artefacts that are actually present.
Analysis of Google Photos can provide important insights into media files, capture times and location data. A reliable assessment requires a comprehensive evaluation of all available data.
CUSTOMER REVIEWS
What our customers say
4.8 out of 5 stars on Trustpilot · 54 reviews
“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”
idalein
Verified review on Trustpilot
“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”
Layla Pankratz
Verified review on Trustpilot
“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”
a woman from Cologne
Verified review on Trustpilot
Enquire now – free initial consultation
Would you like to have Google Photos data on an Android device professionally examined? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.
RELATED TOPICS
You might also be interested in
FREQUENTLY ASKED QUESTIONS
Frequently Asked Questions
Click on a question to see the answer.