Evernote Databases
Overview
Section titled “Overview”Evidence: Evernote Databases
Description: Collect Evernote Databases
Category: Applications
Platform: windows
Short Name: everdb
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Evernote stores notes, attachments, and synchronized content in local databases. These databases contain user notes, clipped web content, documents, and organizational information.
Data Collected
Section titled “Data Collected”This collector gathers structured data about evernote databases.
Collection Method
Section titled “Collection Method”This collector gathers Evernote database directories from user profile and AppData locations containing note databases and synchronized content.
Forensic Value
Section titled “Forensic Value”Evernote databases contain notes, attachments, web clippings, and documents that may include passwords, account information, planning details, or other evidence relevant to investigations.