{"id":14374,"date":"2020-12-23T00:00:00","date_gmt":"2020-12-23T00:00:00","guid":{"rendered":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/"},"modified":"2026-03-11T14:17:21","modified_gmt":"2026-03-11T14:17:21","slug":"dropbox-forensics-ios-cloud-storage-capture","status":"publish","type":"post","link":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/","title":{"rendered":"Dropbox Forensics for iOS Cloud Storage Capture"},"content":{"rendered":"\n<p style=\"font-size: 18px;\">As an investigator you want to be prepared to quickly collect evidence on-scene. This means, when performing <a href=\"\/mobile-phone-forensic-software\" rel=\"noopener\">smartphone forensics<\/a>, you need to have the best tools to capture the evidence you encounter during your triage, including cloud storage such as Dropbox for iOS.&nbsp;<\/p>\n<!--more-->\n<p style=\"font-size: 18px;\">In this short How To video, ADF&#8217;s Director of Training and forensic expert, Rich Frawley demonstrates how to scan an iOS 7 device to show you how to capture Dropbox cloud storage evidence. According to Dropbox &#8211; Dropbox offers one central hub for online file storage, file sharing, and syncing &#8211; and you can access a Dropbox account with a mobile app for iOS.<\/p>\n<video width=\"100%\" controls>\n  <source src=\"https:\/\/4330725.fs1.hubspotusercontent-na1.net\/hubfs\/4330725\/Cloud%20Storage%20Capture%20with%20Dropbox%20for%20iOS.mp4\" type=\"video\/mp4\">\n<\/video>\n<h2 style=\"font-size: 24px; font-weight: bold;\"><span style=\"color: #038d9f;\">Dropbox Forensics for iOS Artifacts<\/span><\/h2>\n<p style=\"font-size: 18px;\">One of the Dropbox features is the automatic syncing of camera uploads, which when Dropbox is opened on an iOS device, will automatically upload any images in the photo gallery. In this video, you&#8217;ll see a completed scan of an iOS 7 device with artifacts from Dropbox used to upload pictures automatically, as well as files that have been manually moved to Dropbox.&nbsp;<img decoding=\"async\" src=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Dropbox-IOS-Blog.jpg\" alt=\"Dropbox Forensics for iOS Cloud Storage Capture\" width=\"244\" loading=\"lazy\" style=\"width: 244px; float: right; margin: 10px;\"><\/p>\n<p style=\"font-size: 18px;\">As you&#8217;ll see in this example, the investigator has 1,027 records located under the Applications Capture Group and Cloud Storage Files capture.&nbsp;If we take a look at the results we can see the file names and the path that they have been uploaded to, including the last action date<\/p>\n<p style=\"font-size: 18px;\">Based on this information, if a preservation order or search warrant is required for Dropbox, the User Account number is recorded for your legal paperwork. If specificity is required, the paths and current file names are listed.<\/p>\n<p style=\"font-size: 18px;\">There are a couple things to note about the automatic uploads, in this case the Camera uploads. The names have been changed to a timestamp. Manual uploads have kept their original names as shown with the files Sharing-Passwords and below.<\/p>\n<p style=\"font-size: 18px;\">Because of the autoname change conducted by Dropbox &#8211; here&#8217;s how you&#8217;ll know if the file still exists on the phone &#8211; one way to do this is to search for the timestamp the file has been named with, although it does require a little work.&nbsp;<\/p>\n<p style=\"font-size: 18px;\">In the video we take a look at one of the uploads with the timestamp of 2020-01-17 20.28.25. In this format the timestamp cannot be searched for, but if we change the format and place it in the search tables box, we can try and match timestamps. 2020\/01\/17 20\/28\/25. Here, you will notice the forward slash replaces the semicolon and the space is consistent.&nbsp;Now select the magnifying glass and you have a match on the exact time and date with six identical images. Do this for several of the uploads and you can make an educated decision.<\/p>\n<p style=\"font-size: 18px;\"><a class=\"optech-default-btn btn-style cta_button\" href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/4330725\/9771225b-284e-40dc-84c9-50e15b0850df\" target=\"_blank\" data-text=\"Watch: Investigate Files Referenced by Artifiact Records\"><span class=\"btn-wraper\">Watch: Investigate Files Referenced by Artifiact Records<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>As an investigator you want to be prepared to quickly collect evidence on-scene. This means, when performing smartphone forensics, you need to have the best tools to capture the evidence you encounter during your triage, including cloud storage such as Dropbox for iOS.&nbsp;<\/p>\n","protected":false},"author":3,"featured_media":12487,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[63,283],"tags":[95,73,136,99,27,35,28,31,137],"class_list":["post-14374","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-video","tag-computer-forensics","tag-dei-pro","tag-dei-pro-field-tablet","tag-how-to-video","tag-mobile-device-forensics","tag-mobile-device-investigator","tag-mobile-forensics","tag-mobile-forensics-video","tag-mobile-triage-kits","optech-blog blog-single"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions\" \/>\n<meta property=\"og:description\" content=\"As an investigator you want to be prepared to quickly collect evidence on-scene. This means, when performing smartphone forensics, you need to have the best tools to capture the evidence you encounter during your triage, including cloud storage such as Dropbox for iOS.&nbsp;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\" \/>\n<meta property=\"og:site_name\" content=\"ADF Solutions\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adfsolutions\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-23T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-11T14:17:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Richard T. Frawley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:site\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Richard T. Frawley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\"},\"author\":{\"name\":\"Richard T. Frawley\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\"},\"headline\":\"Dropbox Forensics for iOS Cloud Storage Capture\",\"datePublished\":\"2020-12-23T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:17:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\"},\"wordCount\":465,\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png\",\"keywords\":[\"Computer Forensics\",\"DEI PRO\",\"DEI PRO Field Tablet\",\"How To Video\",\"Mobile Device Forensics\",\"Mobile Device Investigator\",\"Mobile Forensics\",\"Mobile Forensics Video\",\"Mobile Triage Kits\"],\"articleSection\":[\"News\",\"Video\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\",\"url\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\",\"name\":\"Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png\",\"datePublished\":\"2020-12-23T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:17:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png\",\"width\":1600,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/adfsolutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Dropbox Forensics for iOS Cloud Storage Capture\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/adfsolutions.com\/#website\",\"url\":\"https:\/\/adfsolutions.com\/\",\"name\":\"ADF Solutions\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/adfsolutions.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/adfsolutions.com\/#organization\",\"name\":\"ADF Solutions\",\"url\":\"https:\/\/adfsolutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"width\":512,\"height\":512,\"caption\":\"ADF Solutions\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/adfsolutions\",\"https:\/\/x.com\/adfsolutions\",\"https:\/\/www.linkedin.com\/company\/adf-solutions\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\",\"name\":\"Richard T. Frawley\",\"url\":\"https:\/\/adfsolutions.com\/author\/richardtfrawley\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/","og_locale":"en_US","og_type":"article","og_title":"Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions","og_description":"As an investigator you want to be prepared to quickly collect evidence on-scene. This means, when performing smartphone forensics, you need to have the best tools to capture the evidence you encounter during your triage, including cloud storage such as Dropbox for iOS.&nbsp;","og_url":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/","og_site_name":"ADF Solutions","article_publisher":"https:\/\/www.facebook.com\/adfsolutions","article_published_time":"2020-12-23T00:00:00+00:00","article_modified_time":"2026-03-11T14:17:21+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png","type":"image\/png"}],"author":"Richard T. Frawley","twitter_card":"summary_large_image","twitter_creator":"@adfsolutions","twitter_site":"@adfsolutions","twitter_misc":{"Written by":"Richard T. Frawley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#article","isPartOf":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/"},"author":{"name":"Richard T. Frawley","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39"},"headline":"Dropbox Forensics for iOS Cloud Storage Capture","datePublished":"2020-12-23T00:00:00+00:00","dateModified":"2026-03-11T14:17:21+00:00","mainEntityOfPage":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/"},"wordCount":465,"publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"image":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png","keywords":["Computer Forensics","DEI PRO","DEI PRO Field Tablet","How To Video","Mobile Device Forensics","Mobile Device Investigator","Mobile Forensics","Mobile Forensics Video","Mobile Triage Kits"],"articleSection":["News","Video"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/","url":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/","name":"Dropbox Forensics for iOS Cloud Storage Capture - ADF Solutions","isPartOf":{"@id":"https:\/\/adfsolutions.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage"},"image":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png","datePublished":"2020-12-23T00:00:00+00:00","dateModified":"2026-03-11T14:17:21+00:00","breadcrumb":{"@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#primaryimage","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-63-1.png","width":1600,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/adfsolutions.com\/dropbox-forensics-ios-cloud-storage-capture\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adfsolutions.com\/"},{"@type":"ListItem","position":2,"name":"Dropbox Forensics for iOS Cloud Storage Capture"}]},{"@type":"WebSite","@id":"https:\/\/adfsolutions.com\/#website","url":"https:\/\/adfsolutions.com\/","name":"ADF Solutions","description":"","publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adfsolutions.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adfsolutions.com\/#organization","name":"ADF Solutions","url":"https:\/\/adfsolutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","width":512,"height":512,"caption":"ADF Solutions"},"image":{"@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adfsolutions","https:\/\/x.com\/adfsolutions","https:\/\/www.linkedin.com\/company\/adf-solutions\/"]},{"@type":"Person","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39","name":"Richard T. Frawley","url":"https:\/\/adfsolutions.com\/author\/richardtfrawley\/"}]}},"_links":{"self":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14374","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/comments?post=14374"}],"version-history":[{"count":2,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14374\/revisions"}],"predecessor-version":[{"id":16442,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14374\/revisions\/16442"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media\/12487"}],"wp:attachment":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media?parent=14374"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/categories?post=14374"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/tags?post=14374"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}