SQLite databases are a huge part of smartphone forensics.
You have to learn even the basics at approaching SQLite.
I'm going to show you different ways that you can do this.
I'm going to show you my preferred way.
And then I will show you some easier ways,
especially if you are newer to doing
SQLite forensic examination.
There is a cheat sheet that Lee, myself, and Sarah Edwards
wrote that is available for you in your SANS portal.
If you go to your Media files, you'll be able to find that.
Leverage it.
It is a lot of what we have in this course from here
and on day five put into one simple cheat sheet.
We are going to teach you query basics.
On day five, or on section 5, and actually all the sections
leading up to it, you will have options to do queries.
We're going to force you to do it in this next lab.
And in section 5, you're going to be
I shouldn't say forced, but encouraged,
strongly encouraged, to write queries
to get through these labs.
It's so important that you actually
understand how to write the queries,
but also how to modify them.
I have created a Class Notebook for this course.
The Class Notebook is constantly being updated.
I'm not going to give you access to it just yet.
You will get access to it later in this course.
I just want to make sure you're learning
the key concepts behind SQLite because it's so
important in digital forensics.
If you could learn just one additional skill when
it comes to mobile forensics, I would
say SQLite queries is definitely what you want to focus on.