±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 36087
New Yesterday: 2 Visitors: 96

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Skype Artefacts Question

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Rich2005
Senior Member
 

Skype Artefacts Question

Post Posted: Sep 19, 19 11:33

I'm trying to get straight in my head the way Skype leaves behind artefacts. Specifically with respect the main.db file and the chatsync dat files.

Does anyone have a good reference that goes into this in detail (my brief Google hasn't taught me much more than I already know).

Are the chatsync dat files a form of temporary file that essentially duplicate everything that's in the main.db (albeit in less detail)?
(prior to any form of deletion/garbage collection if that occurs)

A cursory comparison shows a huge amount of overlap, in the large volumes of Skype data I have, but I'd like to understand better what gets stored where and why.

Thanks in advance for any assistance.  
 

Page 1 of 1