microsoft teams forensics — free browser tool | fatcousin

drop teams app data files · parse messages · channels · users · calls · leveldb sqlite · runs locally

load artifacts

Drop Teams folder or database shards

IndexedDB/https_teams.microsoft.com_*/*** · MANIFEST · *.ldb · Cookies · TransportSecurity

Select file

~/Library/Application Support/Microsoft/Teams/ · %APPDATA%\Microsoft\Teams\ · ~/.config/Microsoft/Teams/

drop Microsoft Teams IndexedDB / LevelDB shards (MANIFEST · *.ldb · *.log) and SQLite artifacts