box desktop artifact forensic extractor — free browser tool | fatcousin

drop box drive cache + config · parse sync state + recent files

input

drop box sync db · config · logs (multi-file)

box drive folder export · per-file heuristic parse

Select file

flags sensitive path cache · shared link tokens · sync exclusions · off-hours · volume spikes · bulk deletes

limits

heuristic screener · client/export format varies — sqlite schema differs by box version · not definitive proof

status

>ready