Google App Activity (reflection_gel_events.db)

Location

Description

SQLite database used by the Google Search app (Google Quick Search Box) to store user activity events for the Google Now feed and Discover features. Contains protobuf-encoded event records capturing app usage events, Google Search queries, Google Assistant interactions, web page visits, and contextual suggestions presented to the user.

Forensic Value

The reflection_gel_events database aggregates user activity across multiple Google services into a single artifact, often containing search queries, Assistant voice command transcriptions, and web activity that may not appear in Chrome history. The protobuf-encoded events require specialized decoding but can yield timestamped records of Google searches performed through the home screen widget or voice interface. Google Assistant interactions may include transcribed voice commands and responses, providing evidence of spoken requests. This database frequently retains data for extended periods, offering a long-term activity timeline.

Tools Required