Dropbox Databases

Overview

Evidence: Dropbox Databases Description: Collect Dropbox Synchronization Databases Category: Applications Platform: windows Short Name: drpdb Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

Dropbox stores synchronization state, file metadata, and account information in SQLite databases (DB and DBX files). These databases track local and cloud file synchronization, sharing, and account details.

Data Collected

This collector gathers structured data about dropbox databases.

Collection Method

This collector gathers Dropbox database (DB) and DBX files from Application Data and Local directories, collecting sync databases at multiple directory levels.

Forensic Value

Dropbox databases reveal synchronized files, shared folders, account information, file modifications, and deletion history. This is critical for investigating data exfiltration, identifying shared sensitive files, and recovering evidence stored in cloud storage.