Telegram Desktop Data

Overview

Evidence: Telegram Desktop Data Description: Collect Telegram Desktop Data Category: Applications Platform: windows Short Name: tlgrmdd Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

Telegram Desktop stores chat messages, media, cache, and configuration data in its application directory. This includes encrypted message databases, cached files, and user settings.

Data Collected

This collector gathers structured data about telegram desktop data.

Collection Method

This collector gathers the entire Telegram Desktop directory from the Roaming profile, collecting messages, media, and configuration data.

Forensic Value

Telegram data contains chat messages, shared media, contact information, and channel subscriptions. This is valuable for investigating communications, shared content, and connections to groups or channels involved in investigations.