Recovery of Deleted Record for SQLite3 Database
Xipeng Liu, Xiao Feng Fu, Guozi Sun · 2016
SQLite3 is a small-sized database engine and smartphones use this database to store records of communication data. With the wide application of mobile communication technology, mobile phone forensics is an effective means to crack down on mobile phone crimes. This paper focuses on analysis of the SQLite3 database file structure and format to recover valuable information. The suggested method uses extraction recovery with cyclic reading to locate and extract deleted data, then translates hex file into meaningful characters. Further, tests prove that it can also be used to recover partly overwritten records.