7/10/2023 0 Comments Recovering deleted sticky notes![]() Support recovery of deleted content of plum.sqlite.Run StickyPraser against the StickyNotes.snt.Copy StickyNotes.snt under C:\Users\User\AppData\Roaming\StickyNotes\.Result csv will be created under the directory you specified. ![]() Once run, WAL/SHMfiles will be merged into. Make sure the other files apart from the plum.sqlite are all in the same folder. Run StickyPraser against the copied folder.Copy everything under the %LOCALAPPDATA%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState.You could use any sqlite browser or my script to parse the information out. In order to view the completed events, it is recommended to roll the transaction logs and events of sqlite-shm and sqlite-wal into sqlite3. ![]() Starting from Windows 10 Build 1607, Microsoft has changed the sticky note databse from OLE to sqlite3. %LOCALAPPDATA%\Packages\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe\LocalState\plum.sqlite-wal
0 Comments
Leave a Reply. |