SQLite Database Deleted Records Carving & Forensics

SQLite is a compact database engine highly integrated with embedded devices and locally used applications in various Operating Systems. Recent years have seen extensive usage of portable devices like tablets, smartphones, etc. and this has given rise to adaption of the SQLite application. It also amplifies the chances for surfacing digital evidence using forensic analysis of SQLite database files. Intentional deletion of crucial data from SQLite databases, which are embedded within the applications, can rarely be done by the average person. However, technically expert criminals can perform such tactics to avoid being discovered. In order to perform the deleted data recovery, it is important to understand some factors like structure and architecture of SQLite databases, how the records are stored in the pages of the databases, and how the databases align all the elements.

Read More

Leave a Comment