Home > Products > Windows Passwords > Reset Windows Password > Screenshots > Media forensics
Analyze images and videos stored in Windows Photo application
20.09.2023
Windows Password Recovery v15.3.0
 Windows Credentials Explorer
05.06.2023
Reset Windows Password v13.1
 Forensic tools to analyze Remote Desktop activity in Windows
10.05.2023
Wireless Password Recovery v6.8.1
 New templates to seach for default passwords of some broadband WiFi routers
24.04.2023
Reset Windows Password v13.0
 Full support for Windows 11, duplicate file finder, checksum calculator and some new tools

Passcape RSS news feed more news »

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Reset Windows Password: Windows media forensics


The Windows Media Forensics tool analyzes and displays in a human-readable format Windows photo and video artifacts stored by the Windows Photos application. The Windows Photo library provides a heap of information that could be handy for investigators in a digital forensic analysis.

The Windows Photos is available in Windows 10 and later OSes. The application's database resides at:
C:\Users\%user%\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite

You can use the program's Backup feature to save the data for future analysis.
 

Windows media forensics
 

The Windows Media Forensics tool comprises 3 parts:
  1. Image analysis
  2. Video analysis
  3. User actions



 
Site map | Terms of use | About us | Contacts