What is SQLite Forensic Reporter?

SQLite Forensic Reporter is a universal SQLite database reader capable of processing any SQLite database file which is not corrupt or encrypted. SQLite Forensic Reporter uses advanced identification techniques to correctly identify and filter all database files. Built-in decoding routines means columns which otherwise appear meaningless can be decoded and presented to a user in a human readable format in seconds.

Why use SQLite Forensic Reporter?

You may have in any one case dozens of SQLite database files from a variety of sources including computer systems to mobile phone handsets. Each database may contain a wealth of information and an examiner may not be aware of all SQLite databases in a case. Once identified an examiner needs to use a collection of tools and manual processes to examine each database, a very time consuming process.

SQLite Forensic Reporter takes the hardwork out of this entire process, in as little as three mouse clicks all SQLite database files will be identified, processed, decoded and reports generated for review. Even problematic information such as date/time decoding is taken care of. Template based processing means that a user can create a new template for an unknown type of SQLite database in seconds.

How does it work?

SQLite Forensic Reporter recurses through folders and subfolders, it will first begin by identifying, based on file header analysis, all sqlite database files. During the identification process it will check if an exisiting 'template' is available for each identified database otherwise it will treat it as an 'unknown' database. If a template has been identified relating to a specific database then more detailed identification and analysis may be performed.

Once the identification process is complete the user is presented with all identified database files, the user can review the initial identification results and can create new templates for each database not presently known. Each template contains information specific to a particular database, including how a database is initially identified to how a particular column is decoded and subsequently displayed to a user.

Once the review process is complete the user can process all identified files. At this stage SQLite Forensic Reporter will process each database, lookup the correct template and decode accordingly. Even unknown database files are processed (using default options). Tables, columns and fields are saved to HTML and CSV format along with a list of all identified files.

Custom user defined columns are decoded and presented in the report according to each template with numerous decoding routines which will save each analyst hundreds of hours work in processing and review time.

Useful in both Computer and Mobile Phone forensic investigations this is the most powerful tool for analysing and reporting on the contents of SQLite database files on the market to date. SQLite Forensic Reporter is inexpensive, the price has been set to be affordable for both the individual examiner or group users. This tool is essential for the the computer analyst, mobile phone examiner, data recovery technician, security analysts and private detectives.

What do I get when I buy SQLite Forensic Reporter?

You will receive the software which is standalone (no .NET, no excessive dlls or system files) you can copy SQLite Forensic Reporter folder from one computer to another very easily and it will still work. You will receive a license which can be installed on the machine you are working on, one license per machine is required to be correctly licensed. You will also receive a collection of templates which will assist in decoding a variety of database files not available anywhere else. You will also receive free updates and support for one version cycle (for example version 1.1 through to version 2.1). We will also help to develop your own templates if needed.