Google account snapshots
|Top Previous Next|
With ECX, you can download information from the account, store it as a backup, and then explore the backup content.
The following data categories are available:
•User Info: The Google account user data, including name, account type (person or company), birth date, the URLs to social network profiles, and more.
•Chats: Google Hangouts chat history.
•Contacts: The Google account user contacts and all available information on them.
•Google Keep: The user's notes downloaded from Google Keep.
•Chrome: Google Chrome data, including passwords, bookmarks, autofills, and pages transitions.
•Calendars: Events planned in Google Calendar, including one time and regular events, birthdays, holidays, etc.
•Dashboard: The Google Dashboard content, including information on:
odevices associated with the Google account.
othe Google account.
othe Google account user profile.
othe user's Google search history.
othe user's videos, playlists, and activity on Youtube.
othe user's mail and chat history.
obookmarks, history, passwords, and other settings the user saved in the Google account to access them from Chrome on any device.
oGoogle Apps mail, contacts, and calendars the user synchronized to his/her mobile device.
•Locations: The user's location history tracked in the Google Timeline service.
•Media: The user's photos stored in Google+.
•History: The user's Google History information, including search history, search history, YouTube search and watch history, visited web-sites history, and device history.
•Mail: The user's email data from Gmail.
•Wi-Fi: Information on Wi-Fi connections stored in the user's Google account.
To download information from the Google account, do the following:
1. In the main menu, click File, and then click Add Google Snapshot; or click the button in the bottom-left corner of the ECX screen.
2. On the Download snapshot page, define the authentication type:
•Password: Select this option to use the Google account credentials (Google ID (in the email@example.com format) and password).
•Token: Select this option to use the authentication token extracted from the Google Chrome browser using Google Token Extractor (GTEX). For more information about extracting the token, see the Extracting authentication token topic.
3. Click Sign in.
NOTE: If you have any issues with signing in, please see Signing in.
4. Select the data categories you wish to download.
To define the time interval, click the icon in each Date field, select the dates from the calendar, and then click OK.
5. Click Download.
NOTE: Some Chrome data may be encrypted with a passphrase (for more information, please see https://support.google.com/chrome/answer/1181035?hl=en). If you select to download the Chrome data category, and Chrome information in your Google account is encrypted with a passphrase, ECX requires you to enter this passphrase. If you enter the passphrase, all the Chrome data is downloaded. If you don't enter the passphrase, the encrypted data is not downloaded.
Once the download is completed, you can see the Google account profile and its backup in the Google Accounts pane on the left. The backup title consists of its creation date and time. If the Google account has several backups, they are all listed under this Google account.
In the main window, you can see what data categories have been downloaded in each backup, as well as how many records each backup contains. Data categories that were not selected to be downloaded and categories that have no data are displayed in gray.
To explore the backup content, just click the desired backup record.
To remove a Google account profile or a backup, select the desired record and click the icon in the bottom-right corner of the Google Accounts pane, or, in the main menu, select File, and then click Remove Backup.
Get more information about Elcomsoft Cloud eXplorer
Get full version of Elcomsoft Cloud eXplorer
© 2018 ElcomSoft Co.Ltd.