Discord Desktop Cache
Overview
Section titled “Overview”Evidence: Discord Desktop Cache
Description: Collect Discord Desktop Cache
Category: Applications
Platform: macos
Short Name: dscrd
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Discord is a communication platform with desktop applications that cache messages, media, and other content locally. The cache contains recent communications, shared files, and user interactions stored in the Application Support directory.
Data Collected
Section titled “Data Collected”This collector gathers structured data about discord desktop cache.
Collection Method
Section titled “Collection Method”This collector gathers Discord desktop cache data from user-specific Library/Application Support/discord directories, which contains cached messages, images, and communication content.
Forensic Value
Section titled “Forensic Value”Discord cache is valuable for investigating communications, file sharing, malware distribution through Discord, data leaks, and coordinated attacks. It can reveal conversations, shared malicious files, command and control communications, and threat actor coordination.