Adrian Long has updated Mari DeGrazia’s open source tool – SQLite Deleted Data Parser. He located additional deleted data that can be harvested from re-purposed SQLite pages – specifically the Leaf Table B-Tree page type. Now SQLite Deleted Data parser recovers this information.
You can download the most recent version on Mari’s GitHub.
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
