Epilog, from CCL-Forensics, is an SQLite forensics tool designed to recover deleted data for use by digital forensic investigators.
Features of epilog:
• epilog presents deleted data contained in SQLite databases
• epilog uses 3 different algorithms in order to recover and rebuild deleted records
• epilog analyses SQLite data recovered records and matches them to a table in the live database files
• epilog works on live and deleted database files, the temporary "journal files" which are generated during a database operation and across a disc image or hex dump
• epilog enables the user to save a single field to file, or batch export multiple "blob" (binary objects) fields from the recovered records for further analysis
• epilog allows the user to generate "Insert Statements" from recovered records in order to facilitate the restoration of deleted records into a live database
Epilog is available for download (with a free trial) at www.ccl-forensics.com/epilog.
For more information, please contact epilog@ccl-forensics.com
Link to this comment:
All Comments (0)