Glossary
Windows.db
The SQLite database that holds the Windows Search property store on Windows 11, with its write-ahead log Windows.db-wal and companion Windows-gather.db.
Windows.db is the Windows 11 successor of Windows.edb. It is a SQLite database in write-ahead-log mode, stored in C:\ProgramData\Microsoft\Search\Data\Applications\Windows\.
Its SystemIndex_1_PropertyStore table stores one row per (WorkId, ColumnId, Value), and SystemIndex_1_PropertyStore_Metadata maps each ColumnId to a property name such as System.ItemPathDisplay. A parser must pivot those rows back into one record per item. The latest transactions live in Windows.db-wal, and the gather tables in Windows-gather.db. Always collect the three together. Details in Windows.db forensics.