dropbox desktop artifact forensic extractor — free browser tool | fatcousin

drop dropbox %APPDATA%\\Dropbox + cache · parse host.db + sync history + filecache

input

drop dropbox host.db · filecache.dbx · sync_history · logs · zip

or click

Select file

host.db · filecache.dbx · sync_history · %APPDATA%\Dropbox folder zip · %LOCALAPPDATA%\Dropbox\logs

limits

heuristic screener · parses artifacts locally · dropbox desktop schema varies by version · encrypted dbx may not parse · not definitive proof

status

>ready