Skip to content

This is an Autopsy Plugin used to parse SQLite Databases generated by the Facebook App on Windows 10 platforms.

Notifications You must be signed in to change notification settings

group305/windows10-facebook-app-data-parser

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 

Repository files navigation

windows10-facebook-app-data-parser

This is an Autopsy Plugin used to parse SQLite Databases generated by the Facebook App on Windows 10 platforms.

How to Install/Run Module

To run:

  1. Open Autopsy and determine the location of your python modules on your local machine.
  2. Create a separate folder for this parser.
  3. Add this parser to that folder.
  4. Add your "fbsyncstore.db" file to that same directory. Make sure your file name matches what is in the code.
  5. Create a new case in autopsy and add the above data source.
  6. Choose to run this module.

*Note: Run times may vary depending on how many rows there are to query in the persons table.

About

This is an Autopsy Plugin used to parse SQLite Databases generated by the Facebook App on Windows 10 platforms.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages