Google Drive-- and keep in mind, you do have queries for a lot
of these file-sharing apps that are available in your course
notebook at for585.com/notebook.
So use these.
So here, for Google Drive, you will get more information,
again, if it's rooted or jailbroken.
But what we can see here, we have a database.
We have items.
And we can start seeing things.
We have titles of files, created_date, modified_date,
shared_date, modified_by_me date-- all
these date/time stamps.
And when we look at this, we have Unix Epoch date/time
stamps.
But look at some of these files.
What are these IPAs?
Those are iOS files.
Maybe they're malware.
It's very important that you look for these databases
to give you clues on files that could
be transferred back and forth.