Firefox 3 / SQLite

Hey Jon,

Not sure about your original question, but there are a few good sql sqllite viewers which can handle firefox pretty well.

Would one of those work? If so I can link you one that I use.

Greetings,

I've been exporting them out of EnCase and viewing them in something more appropriate to the task. (Which I find myself doing more and more with EnCase, and less and less with FTK.)

-David

Dear forensicakb

I would like to know the tools that you used to view sqllite.

thanks )

Some potentially helpful info here….
Forefox Forensics

Jon,

From what I have seen with SQLlite databases Encase will be able to search for keywords within the database as the data is stored in clear text.

Below are a couple of programs that open SQLlite Databases
SQLlite3 Explorer
http//www.singular.gr/sqlite/

SQLite Database Browser
http//sqlitebrowser.sourceforge.net/

SQLite Manager (Fixefox addon)
https://addons.mozilla.org/en-US/firefox/addon/5817

Also see Firefox Forensics for a good tool that reads SQLite database
http//www.machor-software.com/firefox_forensics

Marns

There is also a Firefox plugin that can be used to read the sqlite files. If you have Firefox installed, a search for available extensions should point you to it.

By default it will read the files for the current Firefox profile, can be easily pointed to others (i.e. if you have extracted them).

The Add-on is called SQLite Manager.

Hi everyone thanks for your replies.

Forensicakb it looks like I am going to use an external viewer to display the contents as I need to display the contents of the whole file. If you wouldnt mind doing would you link me to the one that you use. Many Thanks.

I was hoping EnCase would be able to parse the files so that it would simplify the examination process and written report I have to produce for my university work.

Thanks for the other viewers and links that have also been posted I shall have a look at these to see if they will work for what I need.

Thanks.

Did you run an internet search? If you click on the "Search" button, there's an option to find internet browser artifacts and parse them. When the process finishes, you should have everything listed in the Records pane.

I can't say for certain whether this handles FFv3, as it's been a while, but I was under the impression that it did.

Jon