iOS Google Meet
25/04/2025 Friday
Google Meet is a video conferencing platform developed by Google as part
of its Google Workspace suite. It was designed to offer a secure,
reliable, and easy-to-use solution for virtual meetings, remote work,
online classes, and team collaboration. Supporting features like live
captions (powered by AI), breakout rooms, and polls, Google Meet enables
real-time video, audio, and screen sharing across devices. It
prioritizes end-to-end encryption for paid tiers and integrates
seamlessly with Google Calendar, Gmail, and Drive. Available for free
with a Google account and scalable for large webinars, it is widely
adopted by businesses, educators, and individuals globally, emphasizing
accessibility across technical skill levels.
Digital Forensics Value of iOS Google Meet
Video conferencing applications on mobile devices are valuable sources
of evidence in digital forensic investigations, as they can contain logs
of meetings, chat transcripts, shared files, and user interaction
metadata. Google Meet, a widely used video communication service
developed by Google, facilitates secure audio and video calls, often
integrated with Gmail and Google Calendar. It supports real-time
messaging, screen sharing, and file sharing during meetings. Google Meet
stores data related to meeting history, participant lists, chat
messages, and connection logs, making it a useful application for
extracting communication patterns and collaborative activities during
forensic analysis.
Location of iOS Google Meet Artifact
Information related to the user’s Google Meet can be found in the
following locations:
/private/var/mobile/Containers/Data/Application/<App-GUID>/Application
Support/DataStore
/private/var/mobile/Containers/Data/Application/<App-GUID>/Library/Application
Support/callHistoryDatabase.db
/private/var/mobile/Containers/Data/Application/<App-GUID>/LibraryLibrary/Preferences/com.google.Tachyon.plis
Analyzing iOS Google Meet Artifact with ArtiFast
This section will discuss how to use ArtiFast to extract iOS Google Meet
artifacts from iOS and what digital forensic insights we can gain from
them.
After you have created your case and added evidence for the
investigation, at the Artifact Selection phase, you can select the iOS
Google Meet artifact.
×
Once ArtiFast parser plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of iOS Google Meet artifact in ArtiFast.
iOS Google Meet Accounts
- Date/Time: The date and time of the first call.
- Account Name: User account name.
- Country Code: The country code.
- Successful Calls Count: The number of successful calls.
- User ID: User account ID.
- App Version: The application version.
- Missed Calls Count: The number of missed calls.
- Connected Calls Count: The number of connected calls.
iOS Google Meet Contacts
- Time: The user registration date/time.
- ID Type: Indicates whether the user ID is a phone number or an Email.
- FullName: The contact’s Fullname.
- User ID: The user’s unique identifier.
- Last Sync Date/Time: The last synchronization date and time.
- Source Type: The type of the contact source.
- Is Blocked: Indicates whether the contact is blocked or not.
iOS Google Meet Meetings
- Time/Date: The meeting creation time and date.
- Meeting ID: The meeting ID.
- Conversion ID: Conversation ID.
- Meeting Members IDs: The unique identifiers of the meeting members.
- Local User Account ID: The local user account ID.
- Meeting End Date/Time: The time and date the meeting ends.
- Caller Username: The caller’s username.
iOS Google Meet Calls
- Time/Date: The date and time the call was made.
- Call Direction: The direction of the call (incoming/outgoing).
- Call Duration: The duration of the call in seconds.
- Local User Account Phone Number: The local user account’s phone number.
- Remote Partner Username: The call partner’s username.
- Remote Partner Phone Number: The call partner’s phone number.
- Call Type: The call type (Video/Audio).
For more information or suggestions please contact: ekrma.elnour@forensafe.com
