ICAC-DF205 Intermediate Digital Forensic Analysis: SQLite Primer

Delivery Method: Virtual
Location: Online
Duration: 1 Day
Date: 08/30/2023
Time: 9:00 AM – 6:00 PM Eastern

Register Here

Mobile devices dominate the intake list and the desks of most digital forensics analysts globally. As devices are becoming more secure, with an increase in security, the need for detailed analysis is increasing as well. SQLite is a self-contained, serverless database engine. It is found on nearly every operating system and dominates iOS®, Android®, and macOS as one of the most prevalent and relevant data storage mechanisms. Rather than hope our forensic tools support the newest applications or be tethered to how a certain utility parses data, we can arm ourselves with the skills and techniques needed to conquer the analysis of nearly any application.

Key concepts covered in this course include:
• What is SQLite and how to identify and analyze logically
• Recognizing relevant locations of valuable data within SQLite database
• Develop skills needed for crafting custom SQLite queries
• Recognize and decode a variety of common timestamp formats
• Perform SQLite analysis with automation

Closed captioning is always available to students. Live speech-to-text language translations to 100 different languages is also available. Contact support@nw3c.org if you would like this service.

Student Testimonials
“The SQL class has opened up a new level of comfort when investigating Mobile devices. I have been able to confidently confirm the data that automated tools have produced. Recently, I conducted digital forensic exam on a cell phone regarding child pornography. There was no relevant evidence located by the automated tool. I then proceeded to explore different databases, and eventually located child exploitation material and other relevant evidence. This training also helped in a similar manner on a school threat investigation.” -Williamsville, Illinois

Mandatory 100% Participation
To receive a certificate upon completion of this course, the following must be completed:
• Score of 80% or above on post-test
• Complete all in-class exercises