Browser-based cloud storage forensics on google drive artifacts in firefox

Abstract

Cloud storage services are widely used globally, the users of the services are accessing the services using different devices from different locations, amongst which they used the services unethically like breaching someone’s privacy and unauthorised access to an individual’s or organization’s data. But after the interactions with the services, there weсloud storage, digital forensics, browser forensics, Google Drive, Firefore some footprint of the suspects that can be found, which leaves some digital artifacts accessible through web browsers. This research focuses on gathering and analyzing forensic evidence from Firefox’s SQLite database, targeting the user’s interactions with Google Drive. By using ‘places.sqlite’ [1], [2]. We extracted the user’s browsing history, metadata, and timestamps and convert it into human readable form. This analysis will help digital forensics professionals to understand the persistence of browser-based artifacts in forensic investigations and students for guidance on the steps for retrieving browser artifacts [3][4]