アンタイ・フォレンジック伝道者の独り言

基本的にはデジタル・フォレンジックの技術について取り扱っていますが、記載内容には高確率で誤りが含まれる可能性があります。

SQLite3 Forensics関連 参考URL(順番に特に意味なし)

□The SQLite Database File Format
http://www.sqlite.org/fileformat2.html

□The Forensic Implications of SQLite’s Write Ahead Log
http://digitalinvestigation.wordpress.com/2012/05/04/the-forensic-implications-of-sqlites-write-ahead-log/

□Carving SQLite databases from unallocated clusters
http://forensicsfromthesausagefactory.blogspot.jp/2011/04/carving-sqlite-databases-from.html

SQLite overflow pages and other loose ends...
http://forensicsfromthesausagefactory.blogspot.jp/2011/07/sqlite-overflow-pages-and-other-loose.html

SQLite Pointer Maps pages
http://forensicsfromthesausagefactory.blogspot.jp/2011/05/sqlite-pointer-maps-pages.html

□An analysis of the record structure within SQLite databases
http://forensicsfromthesausagefactory.blogspot.jp/2011/05/analysis-of-record-structure-within.html

SQLite Forensics Presentation - Andrew Hoog
https://viaforensics.com/computer-forensics/sqlite-forensics-presentation-andrew-hoog.html

Firefox Forensics and SQLite Tables for Computer Forensics Analysis
http://resources.infosecinstitute.com/firefox-and-sqlite-forensics/

SQLite Write Ahead Log (WAL)
http://www.forensicfocus.com/Forums/viewtopic/t=9087/

□Epilog (SQLite forensic tool) - Video 1 - Overview - YouTube
http://www.youtube.com/watch?v=1AuW3rM3CJ4

Perl Parsing an SQLite Database File Header
http://cheeky4n6monkey.blogspot.jp/2012/03/perl-parsing-sqlite-database-file.html

Sqlite Forensics with SQLite Forensic Reporter - Process SQLite Databases
http://www.filesig.co.uk/sqlite-forensics-process-sqlite-databases-with-sqlite-forensic-reporter.html

□Deftcon 2012 - Meo Bogliolo - SQLite Forensics
http://www.slideshare.net/AlessandroRossetti/presentazione-sq-lite

SQLite Data Recovery
http://chirashi.zensay.com/2010/11/recover-deleted-data-from-sqlite-databases/

□Carving SQLite Records - Salvaging Deleted Information on Smartphones
http://www.caseite.com/content/carving-sqlite-records-salvaging-deleted-information-smartphones

■製品附属機能
SQLite Viewer
http://www.oxygen-forensic.com/en/features/analyst/data-viewers/sqlite-viewer