homepage
Open menu
Contact Sales

SQlite Pocket Reference Guide

This guide is a supplement to SANS FOR518: Mac & iOS Analysis and Incident Response and SANS FOR585: Smartphone Forensics Analysis In-Depth, and enhances concepts covered in other courses. It covers some of the core methods to extracting data from SQLite databases. Definitions, sample queries, and SQLite terminology will help you conduct manual extractions from databases of interest found on Macs, smartphones, and PCs. Commercial tools will only get you so far. Manual recovery and extracting contents is what really matters!

May 19, 2021
Download
470x382_R-Guide_DFIR_SQlite.jpg

Related Content

Blog
DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg
Digital Forensics, Incident Response & Threat Hunting
A Prescription for Windows Prefetch Analysis
The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.
John Brown Headshot
John Brown
read more
Blog
Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)
Top SANS Summit Talks of 2024
This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.
370x370-person-placeholder.png
Alison Kim
read more
Blog
DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg
Digital Forensics, Incident Response & Threat Hunting
SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics
SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.
Phil Hagen
Phil Hagen
read more