Google Plus analysis

Google Plus is the Google-based social network. It allows us to share text/videos/images, add friends, follow people, and message. Google Plus may also, depending on the user's settings, automatically upload all pictures taken on the user's device.

Package name: com.google.android.apps.plus

Version: 4.8.0.81189390

Files of interest:

  • /databases/es0.db

The Es0.db database contains all the information an examiner would expect to find from a social-media account:

Table

Description

all_photos

This contains a URL to download images shared by and with the user as well as the creation date/time in the Linux epoch format.

activites

This contains data displayed in the user's stream (that is, their news feed). The created and modified ...

Get Learning Android Forensics now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial