Many of the important artifacts associated with the particular cloud storage account itself is only accessible from a rooted or jailbroken filesystem. If you are fortunate to get this type of access, essentially you can see everything as it sits in your user’s cloud repository. For Google drive, this also includes pertinent information about how the files ended up in your cloud storage repository and when.

In the example above, the items table from the cello.db located a: USERDATA/data/com.google.android.apps.docs/app_cello/’username’@gmail.com/cello.db has been reviewed for relevant artifacts.