Hello,
Q Is it possible to write a GREP script to "carve" the image for all sqlite databases files including WAL files?
Q Is this what you mean by "try finding at sector level the previous versions of the threads_db2 database as well."
Q Does Android OS have the equivalent of Windows volume shadow copies or some type of restore points which one could roll back to in hopes of restoring earlier versions of sqlite files etc.?
Hello,
Q Is it possible to write a GREP script to "carve" the image for all sqlite databases files including WAL files?
Q Is this what you mean by "try finding at sector level the previous versions of the threads_db2 database as well."
Q Does Android OS have the equivalent of Windows volume shadow copies or some type of restore points which one could roll back to in hopes of restoring earlier versions of sqlite files etc.?
sorry i have been working in other 2 cases … i will start program the python script tonight
i did not understand ur second Q
Q3 id did not find anything about os restoring point's … etc