Notifications
Clear all
Topic starter
28/01/2020 6:27 am
Hi,
How to evidence that data was uploaded on Google Drive from a Windows 10 machine? Which all log files have to be processed and how to read them to confirm that data was uploaded from the machine.
27/08/2020 8:05 pm
Hello wforensic,Â
Did you ever find any answer to your question? I'm looking for the same. Thanks.
23/09/2020 1:08 pm
Hey,Â
More context would be needed here. That Google drive account on that win 10 machine, was it tied to a corporate G Suite?
https://admin.google.com/ on top of that G Suite can show the granular audit actions taken by the account on the machine.
I presume the ask here if more, what native logs on the machine would help. id hazard a guess to any tied to,
- Googledrivesync.exe is an executable file that belongs to the Google Drive client, so client logs.
- Browser logs accessing drive.google.com.