Windows Desktop Search

From ForensicsWiki
Revision as of 13:41, 26 June 2010 by Joachim Metz (Talk | contribs)

Jump to: navigation, search

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Windows Desktop Search (or Windows Search) is a 'desktop' indexer for Microsoft Windows. In Windows XP, Search 4.0 (or Search XP) was an add-on, however Microsoft integrated Search into Windows Vista as 'part of the package'.

Data location

Windows Search stores its data in:

%Profiles%/All Users/Application Data/Microsoft/Search/Data/Applications/Windows/

Note that '%Profile%' is dependent on the Windows version.

The search index is stored in a file named Windows.edb. This file is an Extensible Storage Engine Database (EDB).

To access the Windows.edb file (on a live system) the the Windows Search service needs to be deactivated and the necessary access rights are required.

See Also

Google Desktop Search

Windows.edb file format

Open Source library and tools to read the Windows.edb

External Links