SQLite Forensics Book, now available on Amazon

More information here

 

Blog Comments

  1. Paul's Avatar
    Excellent article, Thank You Dan.

    Remember that once you have created a custom query/report you can save it to the Case Manager for use on your next case. From version 1.2.0 of the Browser you can export your queries either individually, all queries for a given application or all of the queries in your Case Manager database so that they can be shared with a colleague.


    For those that aren't aware if your Sleep Cycle database (or any other database) contains geolocation data (latitude and longitude) then the Forensic Browser for SQLite can be used to create and display a map from the coordinates, this map can then be included in any report (this is really very straight forward). There are articles at the links below that show how to do this for Skype and Facebook - the principles are exactly the same for any database.

    http://sandersonforensics.com/forum/...ChatSync-files

    http://sandersonforensics.com/forum/...ebook-messages