|
|
Article DetailsThis article covers the WindowsMail.MSMessageStore database used by Windows Mail. This article may serve as an aid to forensic examiners or data recovery technicians.
A short guide covering how to quickly gather all file signatures (file headers) from all files within a case for review and/or research purposes. This article will use the tools Header Grab Advanced, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
A short guide covering how to quickly view and export search results from Winhex POS files to CSV format. This article may serve as an aid to forensic examiners or data recovery technicians.
A short guide covering how to quickly search for and detect any hidden worksheets present within a Microsoft Excel Workbook (xls and xlsx). This article will use the tools XLS Worksheet Detect Free and commercial versions, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
A short guide covering how to batch preview URL files used to store favorites information in Internet Explorer. This article will use the tool URL Previewer, part of the Simple Carver Suite. This article may serve as an aid to forensic examiners or data recovery technicians.
- Active Links: 10
- Pending Links: 3
- Todays Links: 0
- Total Articles: 16
- Total Categories: 4
- Sub Categories: 0
Windows Media Player Database ( CurrentDatabase_360.wmdb files) |
| Date Added: August 18, 2009 05:18:38 PM |
| Author: admin |
| Category: Documents |
This article covers the program Windows Media Player and analysis of the data file typically titled CurrentDatabase_360.wmdb and how to extract the content for review. This article may serve as an aid to forensic examiners or data recovery technicians. Windows Media Player is a multimedia, video and music player program developed by Microsoft and comes installed as part of the Microsoft Windows operating system. Windows Media player will search a comptuer for compatible multimedia file types and automatically add to the library. A user can also add additional folders or storage devices containing supported file types. The library can be accessed via Media player, contents can be sorted, arranged and playlists created. The library is saved to a file with the file extension wmdb - on Windows Media Player 11 this file is called CurrentDatabase_360.wmdb. Depending on the version of player installed the file may be called CurrentDatabase_219.wmdb or CurrentDatabase_59R. There may also be a file titled 'CorruptDatabase_XXX.wmdb' where X denotes a number. The library file is located in the following location within each profile: VOLUME\Users\PROFILE\AppData\Local\Microsoft\Media Player Note: the location may vary depending on Windows Operating System version.
The Windows media player library file (for example CurrentDatabase_360.wmdb ) can be readily examined using the tool WMDB Extractor, a forensic software tool which is part of the Simple Carver Suite. The WMDB Extractor is capable of reading the wmdb file and save the contents to CSV, TXT and HTML file formats.
The Media player library file (example: CurrentDatabase_360.wmdb) contains a wealth of information including but not limited to File Path information, file properties, play counts, playlist information, video, music and photo file listings. |
