Creating custom reports showing a subset of users within a specific timeframe.Handling live, deleted and partial records in databases and journals.The areas I will cover, with examples and screenshots, are:
#Sqlite browser filter android#
Database schemas also often vary between platforms, with a different schema for, say, Kik on Android than on IOS and different schemas might mean the best report on one platform differs from another. While these reports usually contain all of the relevant data there can often be additional very useful and relevant data held in columns that do not form part of the generic report.Īdditionally, database developers are prone to changing the schema of a database without notifying anyone this may break your forensic application or may introduce relevant data in a new column.
For instance, the Skype contacts table at the last count contained 97 columns and the messages table has 36 columns. It is worth noting here that most forensic software that creates a nice ‘canned’ report on an application only displays those tables and columns that the developer deems important. The Browser does this by providing a Visual Query Building environment (drag and drop SQL query generation) allowing the creation of very powerful and customized reports often without typing a single character. In this article, I want to cover a few of the areas where the Forensic Browser for SQLite provides features that are missing in other browsers or where it complements other more generic forensic software by providing features that are specific to general databases rather than specific ones.
0 kommentar(er)
