SQlite Pocket Reference Guide
This guide is a supplement to SANS FOR518: Mac & iOS Analysis and Incident Response and SANS FOR585: Smartphone Forensics Analysis In-Depth, and enhances concepts covered in other courses. It covers some of the core methods to extracting data from SQLite databases. Definitions, sample queries, and SQLite terminology will help you conduct manual extractions from databases of interest found on Macs, smartphones, and PCs. Commercial tools will only get you so far. Manual recovery and extracting contents is what really matters!
May 19, 2021
.png "Anastasia Sentsova")
