Are you familiar with Google Takeout?
Google Takeout is a tool that provides a downloadable export of all data tied to a particular Google account.
Do you want to learn more about parsing this valuable artifact?
What valuable data can a Google Takeout export include?
- Account activity & access logs
- Calendar data
- Bookmarks, browsing history, & Chrome settings
- Contacts
- Google Pay data
- Google Classroom (classes enrolled, posts, submissions)
- Google Drive files
- Photos & videos stored in Google Photos
- Google Play Store data (installs, reviews, orders)
- Google Home app data
- Maps data (saved locations, starred places, etc.)
- Gmail messages and attachments
- YouTube data (watch & search history, comments, etc.)
- Android device configuration data (OS versions, account identifiers, etc.)
Steps to Google Takeout data collection
Step 1.
Preferably using Chrome, navigate to https://takeout.google.com.
Make sure you are signed into the account of the data you want to export.
Step 2.
Google Takeout allows you to select all account data or pick and choose which data types you want to export.
After choosing which data types to include, scroll to the bottom and click the Next Step button.
Step 3.
Select the destination of the export.
Select the frequency of the export.
Select the file type & size of the export.
Click the Create Export button.
Note:
If you are working a case over a period of time request the Google Takeout be done again during your investigation for any changes and new data.
Step 4.
How long the export takes depends on the data types selected and the size of the Google account.
Google will send an email when the export is complete.
Watch the E3 Forensic Platform parse Google Takeout Data artifacts such as:
-
Access Log Activity
-
Google Play Store
-
Google Shopping
-
Location History
-
Maps
-
Order History
-
Saved Addresses
-
Account Access Activity
-
Device Access Activity
-
Google Transactions
-
Devices
-
Installs
-
Subscriptions
-
Starred & Labeled Places