Updated MicrosoftTeams.tkape

salty4n6 · Jan 30, 2021 · 25f534f · 25f534f
1 parent b9a332d
commit 25f534f
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/Targets/Apps/Microsoft Teams.tkape → Targets/Apps/MicrosoftTeams.tkape b/Targets/Apps/Microsoft Teams.tkape → Targets/Apps/MicrosoftTeams.tkape
@@ -7,13 +7,21 @@ Targets:
     -
         Name: Microsoft Teams IndexedDB Cache
         Category: Apps
-        Path: C:\Users\%user%\AppData\Roaming\Microsoft Teams\IndexedDB\
+        Path: C:\Users\%user%\AppData\Roaming\Microsoft\Teams\IndexedDB\https_teams.microsoft.com_0.indexeddb.leveldb\
+        Recursive: true
         Comment: "LevelDB database which can contain inbound/outbound chat messages, call history and more"
     -
         Name: Microsoft Teams Local Storage Cache
         Category: Apps
-        Path: C:\Users\%user%\AppData\Roaming\Microsoft\Teams\Local Storage\
+        Path: C:\Users\%user%\AppData\Roaming\Microsoft\Teams\Local Storage\leveldb\
+        Recursive: true
         Comment: "LevelDB database which can contain meeting history, file transfer logs and more"
+    -
+        Name: Microsoft Teams Cache
+        Category: Apps
+        Path: C:\Users\%user%\AppData\Roaming\Microsoft\Teams\Cache\
+        Recursive: true
+        Comment: Chromium cache which can be viewed with Nirsoft's ChromeCacheView
     -
         Name: Microsoft Teams Config
         Category: Apps
@@ -23,3 +31,4 @@ Targets:
 
 # Documentation
 # https://cyberforensicator.com/2020/04/16/looking-at-microsoft-teams-from-a-dfir-perspective/
+# https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/microsoft-teams-and-skype-logging-privacy-issue/