Evidence: Microsoft Calendar
Description: Collect Microsoft Calendar Data
Category: Applications
Platform: windows
Short Name: mclndr
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Microsoft Calendar app stores appointments, meetings, events, and reminders in Unistore databases. This data includes event details, attendees, locations, and timing information synchronized from connected accounts.
Data Collected
This collector gathers structured data about microsoft calendar.
Collection Method
This collector gathers calendar data from Unistore directories that contain event information and calendar entries.
Forensic Value
Calendar data reveals user schedules, meetings, planned activities, and important dates. This can establish timelines, identify alibis, reveal planned actions, and show connections to other individuals through shared events.
