Password Recovery Software

Reset Windows Password: Windows media forensics

The Windows Media Forensics tool analyzes and displays in a human-readable format Windows photo and video artifacts stored by the Windows Photos application. The Windows Photo library provides a heap of information that could be handy for investigators in a digital forensic analysis.

The Windows Photos is available in Windows 10 and later OSes. The application's database resides at:
C:\Users\%user%\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite

Additional Photo, Video and Media databases can be found at the following locations:
C:\Users\%username%\AppData\Local\Packages\Microsoft.ZuneVideo_8wekyb3d8bbwe
C:\Users\%username%\AppData\Local\Packages\Microsoft.ZuneMusic_8wekyb3d8bbwe

You can use the program's Backup feature to save the data for future analysis.
 

1. Image analysis
   Images
   Faces
   People
   Tags
   Character recognition
   Locations
   Dates taken
   Camera models
   Camera manufacturers
   Multimedia applications
   Albums
2. Video analysis
   Video items
   Faces
   People
   Tags
   Dates produced
   Albums
3. User actions
   Album views
   File views
   History of import operations
   History of search operations
   Shared items
   Printed items
4. Photo library (Windows Photos related information)
   Images
   Places
   Dates taken
   Video items
5. Photo library activity
   Search history
6. Media Player library
   Artists
   Albums
   Playlists
   Audio tracks
   Video files
   URLs
7. Media Player activity
   Played recently