Facebook Databases
Overview
Section titled “Overview”Evidence: Facebook Databases
Description: Collect Facebook Store Application User Databases
Category: Applications
Platform: windows
Short Name: fcbkdb
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Facebook Windows Store app maintains multiple databases for Messenger conversations, P2P connections, Scout features, and general app data. These databases are part of Meta’s OSMeta framework for cross-platform synchronization.
Data Collected
Section titled “Data Collected”This collector gathers structured data about facebook databases.
Collection Method
Section titled “Collection Method”This collector gathers Facebook/Messenger database files from app package LocalState directories, including messenger databases, P2P databases, Scout databases, and general DB directories.
Forensic Value
Section titled “Forensic Value”Facebook databases contain message history, contacts, conversation metadata, and app activity. This is valuable for investigating communications, relationships, and social network connections in investigations.