SQLite is a widely used database for Android apps that can store crucial information. Criminals can use Android devices to commit crimes by accessing data like calls, messages, contacts and photos. Forensic analysis of the SQLite database is important for investigations as it contains large amounts of evidence. Specialized forensic software is needed to analyze SQLite databases and extract deleted or corrupted data that can aid investigations.

1. Android SQLite Database Forensics

2. Agenda
• SQLite Database
• Structure of SQLite Database
• Crimes via Android
• Need of Android SQLite Database Forensics
• Recommended Investigative Solution

3. SQLite Database
SQLite is a relational database management system
(RDBMS) that execute a self-contained, zero-
configuration and serverless SQLite database engine.
SQLite is an Open Source database. It is a widely used
compact database platform that requires limited memory
(app 250 Kbyte) at runtime. SQLite is embedded into
several programing languages like C, C++, C3, Java and
many more.

4. SQLite Database Structure

5. Crimes via Android
With the advancement in the technology, the potential of
criminals to commit crimes has also increased. Offenders could
use Android device to perform number of illegitimate activities
which can be traced through MMS, calls logs, SMS, photos,
contacts, etc. Android devices also support email clients,
Internet browser and many other web applications that open
the door for criminals.

6. Need of Android SQLite Database Forensics
SQLite is a widely used open source database. Both iOS and
Android services use SQLite database as a storage format to
save crucial information. Analysis of SQLite database plays a
vital role in investigations as it comprises large volume of
probative information. To analyze and accurately extract
evidence from SQLite platform techies need SQLite Forensic
solution.

7. Perform In-Depth Analysis on SQLite Database File
SQLite Forensics Explorer

8. Eminent Features
• The software is embedded with indexing facility
that aid experts to manage large sized SQLite
files. It does not inflict any file size limitation
for analyzing and extracting evidence from records.
• User can add multiple databases within single case.
Custodians setting helps investigators to manage
the case sufficiently for further analysis.
• Android SQLite database forensics software is an
advanced application that enables user to recover,
view, and analyze corrupted SQLite database files
along with its associated journal files.

9. • The software provides different color patterns,
to categories the data such as Secured data,
Unallocated data, Deleted data and Active data.
• Binary Large Objects (BLOB) such as images,
video along with tables, byte code and structure
can be viewed using the software.
• Android SQLite database forensics software has
ability to recover deleted or corrupted data from
SQLite database files of Android applications.
It recovers every bit of information without any
damage.
continued

10. • Hex tab in the software GUI allows user to
examine SQLite records in binary format. User
can view data with color scheme that reveals
manipulations done on the files.
• During investigation, after collecting evidence,
the software provides distinct file formats to
export database in either PDF or CSV output files.
• To simplify the search mechanism, Android SQLite
database forensics software provides SQL Editor
Tab that displays particular entries via adding
single or multiple queries.
For More Details, Please Visit:
http://www.acquireforensics.com/products/sqlite-forensic-explorer/
continued