Now let's talk some considerations.
When a new database is released, whether it's
through an application or through an iOS update,
what actually changed?
So the first thing you have to figure out, is it a new file?
Is it a file with a similar file name, but in a different path?
If it's not a new file, was a new table
added to that database?
Is it simply that a new column was added to a database?
Did the time stamp format change?
Did a column name change?
Is the data now being embedded as a Protobuf or a BLOB?
Is it being embedded as a binary plist?
All of these things come into play.
In the labs of this section, you are
going to work an entire backup and answer questions.
But then, you are also going to be
challenged with this situation.
With iOS 15 and also 14, Photos.sqlite changed.
There's a change in that database
that you have to find and manipulate in order
to parse key artifacts that your tool may not
be parsing for you.