Telegram Desktop Data
Overview
Section titled “Overview”Evidence: Telegram Desktop Data
Description: Collect Telegram Desktop Data
Category: Applications
Platform: windows
Short Name: tlgrmdd
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Telegram Desktop stores chat messages, media, cache, and configuration data in its application directory. This includes encrypted message databases, cached files, and user settings.
Data Collected
Section titled “Data Collected”This collector gathers structured data about telegram desktop data.
Collection Method
Section titled “Collection Method”This collector gathers the entire Telegram Desktop directory from the Roaming profile, collecting messages, media, and configuration data.
Forensic Value
Section titled “Forensic Value”Telegram data contains chat messages, shared media, contact information, and channel subscriptions. This is valuable for investigating communications, shared content, and connections to groups or channels involved in investigations.