Recovering data from an SQLite database has many uses. Why you ask? One main reason is that SQLite has increased in popularity to epic proportions. It is the most ideal candidate for use in a resource constrained environment. Like where you ask? The industry most benefiting from SQLite at the moment is the mobile phone one. The BlackBerry, Android and iPhone platforms rely on SQLite. As a matter of fact, a large portion of the iPhone’s data storage, like Address Book or SMS Messages are stored in SQLite databases. Google Chrome and Firefox store it’s history and bookmarks in SQLite Databases. The WhatsApp application on a BlackBerry phone stores information on an SQLite Database. It’s everywhere.
With all this popularity, the inner workings of SQLite have held a sense of mystery and intrigue. But not anymore. We’ve cracked the internals of how an SQLite database stores and handles its data. We know where your unreferenced data hides and we know how to recover it. So the next best thing? Write a tool for it. Thus this post serves to introduce our new tool – SQLUn, or simply the SQLite Undeleter. The tool is very ideally suited to Forensics Analysts and investigators who focus on smartphones – most notably iPhones.
SQLUn successfully recovers data from not only unreferenced areas of the database, but also from the slack space of referenced records. In this manner, a Forensic Analyst is certain that data is recovered from every nook and cranny of the database and no area is left unturned. To aid Law Enforcement analysts, SQLUn also has the ability to manage information based on a specific case number. Additionally, data integrity is maintained by conducting SHA1 hashes of all relevant records and databases. Data is further protected by disabling writes to the database and working off a duplicate copy rather than the database file itself. This feature is added to ensure that the database remains intact even if the operator forgets to take a backup.
By now, I’m pretty sure that you’re dying to get your hands on this little gem and I don’t blame you. If you want to become a beta tester for the application, email us at firstname.lastname@example.org and we will take it from there. Please provide some details about yourself including where you work and why we should consider you for beta testing the product. If you work in the Law Enforcement industry, please mail us from your agency email address for expedited handling of your beta tester request.