Facebook Databases

Overview

Evidence: Facebook Databases Description: Collect Facebook Store Application User Databases Category: Applications Platform: windows Short Name: fcbkdb Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

Facebook Windows Store app maintains multiple databases for Messenger conversations, P2P connections, Scout features, and general app data. These databases are part of Meta's OSMeta framework for cross-platform synchronization.

Data Collected

This collector gathers structured data about facebook databases.

Collection Method

This collector gathers Facebook/Messenger database files from app package LocalState directories, including messenger databases, P2P databases, Scout databases, and general DB directories.

Forensic Value

Facebook databases contain message history, contacts, conversation metadata, and app activity. This is valuable for investigating communications, relationships, and social network connections in investigations.