Evidence: Telegram Desktop Data
Description: Collect Telegram Desktop Data
Category: Applications
Platform: windows
Short Name: tlgrmdd
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Telegram Desktop stores chat messages, media, cache, and configuration data in its application directory. This includes encrypted message databases, cached files, and user settings.
Data Collected
This collector gathers structured data about telegram desktop data.
Collection Method
This collector gathers the entire Telegram Desktop directory from the Roaming profile, collecting messages, media, and configuration data.
Forensic Value
Telegram data contains chat messages, shared media, contact information, and channel subscriptions. This is valuable for investigating communications, shared content, and connections to groups or channels involved in investigations.
