Running head: DROPBOX FORENSICS 1

Dropbox Forensics

Lorenze Salas

Professor Aaron Jones

DROPBOX FORENSICS 2

Dropbox Forensics

A few months ago, I created a Dropbox account containing photos and videos captured

from my mobile device to sync them to the desktop/computer. Dropbox is a cloud storage service

that allows the user to sync their devices to download documents, photos, videos, music, and

other stuff to get easy access from other devices. Google Drive, Mega, OneDrive, iCloud, and

many more are cloud storage service as well with their disadvantages and advantages prior when

using it. I used Belkasoft Evidence Center X to investigate the Dropbox files that I made in the

past. I opened the software application, then create the case, and add disk drive as my data

source. In the data source artifacts, I only checked the cloud services boxes and procced to

complete the data source.

DROPBOX FORENSICS 3

After waiting for a few minutes, the data source and the results were completed. It shown

me 50 worth of files within the Dropbox folder and 1 contact, which is the physical drive.

The videos and photo were shown in the artifacts tab. It shows the file name, file type,

path, and creation of the file in UT. Additionally, in the SQLite Viewer, it shows the file whether

it’s deleted or not deleted in the “file_event_type” and file id.

DROPBOX FORENSICS 4

References

What is Dropbox - Features overview. (n.d.). Dropbox. https://www.dropbox.com/features