Tag Archives: XT_SQLitedecoder

SQLite Databases at hex level

My recent post on “Timelining using SQLite Write Ahead Logs” highlighted how much background information is required to deal with SQLite databases. This post is going to give a more in-depth overview of the structure of the SQLite 3 file format. It should take you from knowing very little about SQLite databases to being able toContinue reading “SQLite Databases at hex level”

Timelining using SQLite Write Ahead Logs

Todays question is: Can we tell when records have been deleted from an SQLite database? TL;DR – We can provide some time and date information in very particular circumstances using the WAL log file. It can be very time consuming! Quick warning – This article will assume some knowledge of SQLite databases. I will probablyContinue reading “Timelining using SQLite Write Ahead Logs”