Browser Artifacts Of Google Drive And Gmail - DFRWS

2y ago
40 Views
2 Downloads
2.80 MB
33 Pages
Last View : 3d ago
Last Download : 4m ago
Upload by : Mara Blakely
Transcription

Browser Artifacts ofGoogle Drive and GmailElizabeth Schweinsberg

Why are we here? Uploading information to a personal drive account is a great way to stealinsider information HTTPS makes it hard to see what “pages” on google.com someone visits This is not the easiest way to get this info for enterprise accounts I’ve not see this information published, and had to figure out a lot of it onmy own

Gen Beringer is at it againOur favorite BBQ sauce recipe stealing suspect is back at it.This time, he’s sharing even more recipes and logos with the competitors.We have a copy of his Chrome Browser History, so let’s see what he’s been upto.

GMailOpen the Inbox @ 0404

GMailRead the Promos tab @ 0405

GMailRead an Email @ 0404

GMailSearch for “bbq” @ 0408

GMailPage through the search results @ 0408

GMailView one of the search results @ 0408

GMailCompose a new email from the Inbox @ 0413

GMailSend the email @ 0415

GMailReply to an email @ 0411

GMailSo, you can get some information from GMail browser history, but it doesn’ttell you anything about who they are talking to.

InboxFrom 0417 to 0423, did a lot of the same actions -- read emails, search, mark as done,reply, compose, and create a reminder. This is what you get:

InboxWell, that’s not very helpful.

DriveLog into Google Drive @ 0426

DriveView a Folder @ 0437

DriveView a Google Doc @ 0431

DriveIf you leave Docs open in Chrome, you get **a lot** of entries in your browser history. grep "1GN" genb-drive.csv wc91267229991 grep "1Ml" genb-drive.csv wc80173923721

DriveDownload Doc as PDF @ 0432

DriveCreate a new Google Doc @ 0432

DriveCopy a Doc from the Docs interface @ 0451 (and another day)

DriveCopy a Doc from the Drive interface @ 0437

DriveViewing the First Sheet in a Spreadsheet @ 0439

DriveViewing Other Sheets in a Spreadsheet @ 0439

DriveViewing Presentation @ 0439

DriveViewing Presentation @ 0440 -- Next Slide

DriveViewing an Image @ 0444

DriveOpen a PDF in its own tab @ 0438

DriveSearching in Drive @ 0441

DriveThings that didn’t end up in Browser history: Sharing files Printing files Uploading files

Next Steps Someday I will write a plaso analysis plugin to find things like copying anddownloading files. In the meantime, the History file, a timeline of the actions take on theaccount, and these slides will be on my github logic@

In Summary You can see some information on reading and writing emails, but not therecipient But only on GMail -- you are out of luck if they are using Inbox Searches in GMail, Inbox, and Drive are easy to see! In Drive, you can get an idea what they were looking at, if they give theirfiles useful titles There are some patterns to the DocIDs, but it’s easier to find out what kind offile it is from the URL And get some hints if they were trying to take it (downloads, copies), butnot printing or sharing

View a Google Doc @ 0431. . 91 2672 29991 grep "1Ml" genb-drive.csv wc 80 1739 23721. Drive Download Doc as PDF @ 0432. Drive Create a new Google Doc @ 0432. Drive Copy a Doc from the Docs interface @ 0451 (and another day) Drive Copy a Doc from the Drive interface @ 0437. Drive Viewing the First

Related Documents:

Google Drive (Google Docs, Google Sheets, Google Slides) Employees are automatically issued a Kyrene Google account. Navigate to drive.google.com. Use Kyrene email address and network password to login. Launch in Chrome browser for best experience. Google Drive is a cloud storage sys

Google Meet Classic Hangouts Google Chat Google Calendar Google Drive and Shared Drive Google Docs Google Sheets Google Slides Google Forms Google Sites Google Keep Apps Script D

Grammar as a Foreign Language Oriol Vinyals Google vinyals@google.com Lukasz Kaiser Google lukaszkaiser@google.com Terry Koo Google terrykoo@google.com Slav Petrov Google slav@google.com Ilya Sutskever Google ilyasu@google.com Geoffrey Hinton Google geoffhinton@google.com Abstract Synta

Google Brain avaswani@google.com Noam Shazeer Google Brain noam@google.com Niki Parmar Google Research nikip@google.com Jakob Uszkoreit Google Research usz@google.com Llion Jones Google Research llion@google.com Aidan N. Gomezy University of Toronto aidan@cs.toronto.edu Łukasz Kaiser Google Brain lukaszkaiser@google.com Illia Polosukhinz illia .

2 Após o login acesse o Google Drive ou o Google Docs e selecione a ferramenta Google Forms (Formulários). Clique na caixa de Ferramentas do Google, localizada no canto direito superior da tela e selecione o Google Drive. Na tela do Google Drive clique em New , opção More e selecione Google Forms. OBS: É possível acessar o google

Mobile Strategy. 6. Browser Specific Configurations. 6. Apple Safari Browser Configurations. 6. Google Chrome Browser Configurations. 7. Microsoft Edge Chromium-Based Browser Configurations. 8. Microsoft Edge HTML-Based Browser Configurations. 9. Microsoft Internet Explorer \(IE\) Browser Configurations. 9. Mozilla Firefox Browser .

Enterprise Browser Application And Configuration Version Comparision - From Enterprise Browser 1.8 and above, Enterprise Browser Application and Configuration version comparison is now gets captured at Enterprise Browser log file. [Show Enterprise Browser 1.7 Release Information] [Show Enterprise Browser 1.6 Release Information]

GeneArt Strings DNA Fragments 8 Gene assembly 9 Mammalian expression systems 10 Selecting a mammalian expression system 10 . the five protein classes. The selected genes were individually optimized using the GeneOptimizer algorithm [2]. For comparison, the corresponding wild type genes were subcloned using native sequences available from the NCBI database. Each gene was then .