Windows Timeline

ActivitiesCache.db

#	Field	Type	Display name
1	time	DATE	Time
2	id	STRING	ID
3	executable	STRING	Executable
4	activity_type	STRING	Activity type
5	payload_app_display_name	STRING	Payload app display name
6	payload_display_text	STRING	Payload display text
7	payload_description	STRING	Payload description
8	payload_active_duration	STRING	Payload active duration
9	start_time	DATE	Start time
10	end_time	DATE	End time
11	last_modified_time	DATE	Last modified time
12	last_modified_on_client	DATE	Last modified on client
13	expiration_time	DATE	Expiration time
14	priority	INT	Priority
15	activity_status	INT	Activity status
16	user_action_state	INT	User action state
17	created_in_cloud	INT	Created in cloud
18	is_read	INT	Is read
19	is_local_only	INT	Is local only
20	etag	INT	Etag
21	group_app_activity_id	STRING	Group app activity ID
22	app_activity_id	STRING	App activity ID
23	parent_activity_id	STRING	Parent activity ID
24	package_id_hash	STRING	Package ID hash
25	platform_device_id	STRING	Platform device ID
26	payload_activation_uri	STRING	Payload activation URI
27	payload_background_color	STRING	Payload background color
28	payload_content_uri	STRING	Payload content URI
29	payload_type	STRING	Payload type
30	payload_user_timezone	STRING	Payload user timezone
31	payload_reporting_app	STRING	Payload reporting app
32	clipboard_payload	STRING	Clipboard payload
33	tag	STRING	Tag