Evernote Databases

Overview

Evidence: Evernote Databases Description: Collect Evernote Databases Category: Applications Platform: windows Short Name: everdb Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

Evernote stores notes, attachments, and synchronized content in local databases. These databases contain user notes, clipped web content, documents, and organizational information.

Data Collected

This collector gathers structured data about evernote databases.

Collection Method

This collector gathers Evernote database directories from user profile and AppData locations containing note databases and synchronized content.

Forensic Value

Evernote databases contain notes, attachments, web clippings, and documents that may include passwords, account information, planning details, or other evidence relevant to investigations.