Notifications
Clear all

Google Drive Data Upload  

  RSS
wforensic
(@wforensic)
New Member

Hi,

How to evidence that data was uploaded on Google Drive from a Windows 10 machine? Which all log files have to be processed and how to read them to confirm that data was uploaded from the machine.

Quote
Posted : 28/01/2020 5:27 am
jamesvogel
(@jamesvogel)
New Member

Hello wforensic

Did you ever find any answer to your question? I'm looking for the same. Thanks.

ReplyQuote
Posted : 27/08/2020 8:05 pm
Mister4n6
(@mister4n6)
New Member

Hey, 

More context would be needed here. That Google drive account on that win 10 machine, was it tied to a corporate G Suite?

https://admin.google.com/ on top of that G Suite can show the granular audit actions taken by the account on the machine.

I presume the ask here if more, what native logs on the machine would help. id hazard a guess to any tied to,

  • Googledrivesync.exe is an executable file that belongs to the Google Drive client, so client logs.
  • Browser logs accessing drive.google.com.
ReplyQuote
Posted : 23/09/2020 1:08 pm
Share: