Microsoft People
Overview
Section titled “Overview”Evidence: Microsoft People
Description: Collect Microsoft People Data
Category: Applications
Platform: windows
Short Name: mppl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Microsoft People app stores contacts, contact photos, and relationship information in Unistore databases. This includes contact details, profile pictures, and integration with email accounts.
Data Collected
Section titled “Data Collected”This collector gathers structured data about microsoft people.
Collection Method
Section titled “Collection Method”This collector gathers contact data from Unistore directories, People app thumbnails, and Cortana contact configuration files.
Forensic Value
Section titled “Forensic Value”People data reveals user contacts, communication networks, and relationships. This can identify associates, establish social connections, and provide contact information for witnesses or suspects.