Microsoft Calendar
Overview
Section titled “Overview”Evidence: Microsoft Calendar
Description: Collect Microsoft Calendar Data
Category: Applications
Platform: windows
Short Name: mclndr
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Microsoft Calendar app stores appointments, meetings, events, and reminders in Unistore databases. This data includes event details, attendees, locations, and timing information synchronized from connected accounts.
Data Collected
Section titled “Data Collected”This collector gathers structured data about microsoft calendar.
Collection Method
Section titled “Collection Method”This collector gathers calendar data from Unistore directories that contain event information and calendar entries.
Forensic Value
Section titled “Forensic Value”Calendar data reveals user schedules, meetings, planned activities, and important dates. This can establish timelines, identify alibis, reveal planned actions, and show connections to other individuals through shared events.