SecurityRonin.sqlite4n6 0.10.1

Read-only SQLite forensic CLI — carve deleted records, grade anomalies

sqlite4n6 is a read-only SQLite forensic CLI. It carves deleted records out of a database's free (unallocated) space — freelist pages, in-page free blocks, dropped-table pages, and an uncheckpointed WAL overlay — recovering rows a live query cannot, and grades forensically-notable anomalies into severity-ranked findings. It opens the evidence file read-only and never writes the file or its sidecars.

Command Line

Info

Dependencies