Skype Databases
Overview
Section titled “Overview”Evidence: Skype Databases
Description: Collect Skype Databases
Category: Applications
Platform: windows
Short Name: skypdb
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Skype stores chat messages, call history, contacts, and configuration data in SQLite databases (main.db, skype.db) and XML files. Both classic Skype and modern UWP versions maintain these databases with message history and metadata.
Data Collected
Section titled “Data Collected”This collector gathers structured data about skype databases.
Collection Method
Section titled “Collection Method”This collector gathers Skype database files from Roaming, LocalState app packages, and legacy Application Data directories, collecting message databases, shared XML files, configuration files, and chat sync data.
Forensic Value
Section titled “Forensic Value”Skype databases contain chat messages, call logs, contact lists, file transfer records, and user activities. This is essential for investigating communications, establishing timelines, identifying contacts, and recovering conversation evidence.