Evidence: WhatsApp Desktop Cookie
Description: Collect WhatsApp Desktop Cookie
Category: Applications
Platform: windows
Short Name: whtck
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
WhatsApp Desktop stores session cookies and authentication data in cookie files. These files maintain the connection between the desktop app and the mobile device.
Data Collected
This collector gathers structured data about whatsapp desktop cookie.
Collection Method
This collector gathers WhatsApp cookie files from app package and Roaming directories containing session and authentication data.
Forensic Value
WhatsApp cookies can reveal active sessions, authentication details, and help establish when the application was actively used. This supports timeline analysis and user activity reconstruction.
