SQlite Pocket Reference Guide

This guide is a supplement to SANS FOR518: Mac & iOS Analysis and Incident Response and SANS FOR585: Smartphone Forensics Analysis In-Depth, and enhances concepts covered in other courses. It covers some of the core methods to extracting data from SQLite databases. Definitions, sample queries, and SQLite terminology will help you conduct manual extractions from databases of interest found on Macs, smartphones, and PCs. Commercial tools will only get you so far. Manual recovery and extracting contents is what really matters!

May 19, 2021

Related Content

Following the Trail of Threat Actors in Google Workspace Audit Logs

Digital Forensics, Incident Response & Threat Hunting

Following the Trail of Threat Actors in Google Workspace Audit Logs

Many of the events we highlight in this blog post and the cheat sheet occur as part of normal business operations...

Megan Roddie-Fonseca

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2024

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.

Security Awareness, Cybersecurity Leadership, Cloud Security, Open-Source Intelligence (OSINT), Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, CyberLive, Workforce Development, Career Development, Why Certify, Imposter Syndrome, NetWars, Mentorship, Job Hunting, Operating System & Device In-Depth, Artificial Intelligence (AI)

A Visual Summary of SANS New2Cyber Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2024