The Google Voice app is a cross-platform communication tool, offering dedicated apps for Android and iOS as
well as compatibility with popular desktop operating systems. It can also be used directly through a web
browser on any device without requiring installation. While primarily designed for U.S. users, Google Voice
has limited functionality for international users, mainly those with a U.S. number or a Google Workspace
subscription. For U.S. customers, it provides a free phone number for calls, texts, and voicemail, all
accessible via Wi-Fi or mobile data.
Similar to other applications that provide instant messaging features, Google Voice can be a crucial source
of corroborative communication data, as the artifacts it leaves behind may contain valuable evidence. The
extracted data can help investigators gather information about a user's suspicious communication activities,
identity details. These artifacts can be evidence of suspicious activities carried out by the user or
communication with other investigation-related entities.
Android Google Voice artifacts can be found at the following locations:
data/data/com.google.android.apps.googlevoice
data/data/com.google.android.apps.googlevoice/files/accounts/1/LegacyMsgDbInstance.db
This section will discuss how to use ArtiFast to extract Android Google Voice artifacts from Android
machines’ files and what kind of digital forensics insights we can gain from the artifacts.
After you have created your case and added evidence for the investigation, at the Artifact Selection phase,
you can select Android Google Voice artifact parsers:
Once ArtiFast parsers plugins complete processing the artifact for analysis, it can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Android Google Voice artifacts in ArtiFast.
Android Google Voice Messages
Android Google Voice Pending Messages
Android Google Voice Calls
Android Google Voice Account Information
For more information or suggestions please contact: ekrma.elnour@forensafe.com