Microsoft People

Overview

Evidence: Microsoft People Description: Collect Microsoft People Data Category: Applications Platform: windows Short Name: mppl Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

Microsoft People app stores contacts, contact photos, and relationship information in Unistore databases. This includes contact details, profile pictures, and integration with email accounts.

Data Collected

This collector gathers structured data about microsoft people.

Collection Method

This collector gathers contact data from Unistore directories, People app thumbnails, and Cortana contact configuration files.

Forensic Value

People data reveals user contacts, communication networks, and relationships. This can identify associates, establish social connections, and provide contact information for witnesses or suspects.