Parsing SQLite databases with Oxygen Forensic SQLite Viewer
The Oxygen Forensic program has been already described previously in Chapter 1, SIM Cards Acquisition and Analysis. This program has an Oxygen Forensic SQLite Viewer module, which can be used for SQLite database viewing and analysis.
Getting ready
Oxygen Forensic SQLite Viewer can be started by completing three steps:
- Double-click the
OxySQLiteViewer64.exe
file, which is located at the following path:‘C:\Program Files (x86)\Oxygen Software\Oxygen Forensic Detective’
.
- Double-click the Oxygen Forensic program icon. In the toolbar of the program, select
Tools
and thenSQLite Database Viewer
:
Tools menu
- In the main
Case window, click the
File Browser
section. In the opened window of the section, select theDatabase files tab. In this window, all the databases including deleted ones will be displayed. Select the database you want to examine. Left click on it. In the drop-down window select
Open in SQLite Viewer
.