Google Drive Data Upload
How to evidence that data was uploaded on Google Drive from a Windows 10 machine? Which all log files have to be processed and how to read them to confirm that data was uploaded from the machine.
More context would be needed here. That Google drive account on that win 10 machine, was it tied to a corporate G Suite?
https://admin.google.com/ on top of that G Suite can show the granular audit actions taken by the account on the machine.
I presume the ask here if more, what native logs on the machine would help. id hazard a guess to any tied to,
- Googledrivesync.exe is an executable file that belongs to the Google Drive client, so client logs.
- Browser logs accessing drive.google.com.