SearchGiant

Command line forensic imaging utility for cloud services.

This program was designed for my Applied Research Project at John Jay University for my masters degree in digital forensics and cyber security. It's a pretty simple but powerful command line utility that does it's best to create forensically sound acquisition of remote cloud data on some popular providers:

• Google Drive
• GMail
• Dropbox

I do plan on adding more providers when I get more time to work on it. I know there is a lot of room for improvement in the codebase.

Idealogy

I wanted to develop something open source and highly portable, which was my main reason for not making use of any exisitng libraries for accessing the API's. The second reason was simply to learn .

Installation

Since I wrote this with the intention of not relying on any third party dependencies in order to be as portable as possible, there is no installation required.

Simply run

python3 searchgiant.py

Basic Usage

usage: searchgiant.py [-h] [--mode mode] [--threads threads] [--prompt]
                      project_dir service_type

Cloud Service forensic imaging tool

positional arguments:
  project_dir           Path where project will be created. If project already
                        exists it will use existing settings
  service_type          Accepted values: google_drive, dropbox, gmail

optional arguments:
  -h, --help            show this help message and exit
  --mode mode, -m mode  Synchronization mode. Accepted values are: full,
                        metadata. Default value is: full
  --threads threads, -t threads
                        Amount of parallel threads used to download files
  --prompt, -p          Prompt before actually downloading anything

Screenshots