Reset Windows Password: Windows media forensics
The Windows Media Forensics tool analyzes and displays in a human-readable format Windows photo and video artifacts stored by the Windows Photos application. The Windows Photo library provides a heap of information that could be handy for investigators in a digital forensic analysis.
The Windows Photos is available in Windows 10 and later OSes. The application's database resides at:
C:\Users\%user%\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\MediaDb.v1.sqlite
You can use the program's Backup feature to save the data for future analysis.

The Windows Media Forensics tool comprises 3 parts:
- Image analysis
- Video analysis
- User actions