Android Google Maps

Investigating Android Google Maps

19/01/2024 Friday

Google Maps is a widely used mapping and navigation application developed by Google. It provides users with detailed maps, real-time traffic updates, route planning, and various other features for both urban and rural navigation. The application is available on multiple platforms, including Android and iOS, making it a crucial tool for users worldwide.

Digital Forensics Value of Android Google Maps

Regarding mobile forensics GPS and location artifacts are a crucial part of the investigation. Therefore, the Android Google Maps application holds significant forensic value. Forensic analysts can uncover crucial information about a user's location history and activities by examining the artifacts generated and stored by Google Maps on Android devices. The application maintains a history of a user's movements, offering insights into explored places and the timestamp.

Location of Android Google Maps Artifacts

Google Maps artifacts are found in the following location:
data/data/com.google.android.apps.maps/databases/gmm_sync.db

Analyzing Android Google Maps Artifacts with ArtiFast

This section will discuss using ArtiFast to extract Android Google Maps artifact from Android device's files and what kind of digital forensics insights we can gain from the artifact.

After you have created your case and added evidence for the investigation, at the Artifact Selection phase, you can select Android Google Maps artifact:

Once ArtiFast parser plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Google Maps artifact in ArtiFast.

Android Google Maps Artifacts

Location on The Map: The link to the location on the map.
Longitude: The location’s longitude.
Latitude: The location’s Latitude.
Item Proto: Location’s proto information.
Database Row ID: The row ID of the record in the database.
Client ID: The client ID.

For more information or suggestions please contact: ekrma.elnour@forensafe.com