Zoom Media
Overview
Section titled “Overview”Evidence: Zoom Media
Description: Collect Zoom Media Files & Link Previews
Category: Applications
Platform: windows
Short Name: zmm
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”Zoom stores cached images, link previews, and media files shared during meetings and chats. These files include profile pictures, shared images, and previews of linked content.
Data Collected
Section titled “Data Collected”This collector gathers structured data about zoom media.
Collection Method
Section titled “Collection Method”This collector gathers media files and link preview images from the Zoom data directory, collecting cached visual content from meetings and chats.
Forensic Value
Section titled “Forensic Value”Zoom media files can reveal shared content, profile pictures, and visual evidence from meetings. This helps identify participants, recover shared images, and understand the context of communications.