Google Keep analysis
Keep is a note-taking application provided by Google. It can also be used to set reminders, either at a certain date/time or when the user is at a specified location.
Package name: com.google.android.keep
Version: Default version with Android 5.0.1 (not listed within app)
Files of interest:
/databases/keep.db/files/1/image/original
The files/1/image/original directory contains photos taken using the app. Notes and reminders can both be associated with an image.
The keep.db
contains all of the information about notes and reminders. There are, once again, several tables of interest:
|
Table |
Description |
|---|---|
|
|
This contains information about location-based reminders. The |
Get Learning Android Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
