Parsing SQLite databases with Belkasoft Evidence Center
The Belkasoft Evidence Center program has already been described previously in Chapter 2, Android Devices Acquisition. This program has the functionality for SQLite database analysis on both mobile devices and PCs. In this chapter, we will describe how to analyze a SQLite database with Belkasoft Evidence Center.
How to do it…
In this recipe, we will describe an interesting case. The problem was the following: on the screen of an examined iPhone 5 there was correspondence with two people on Skype, but it was not seen in the results of the analysis, the extracted data, which was displayed in the forensic tools. Before I was asked for assistance, my colleagues vainly tried all mobile forensics tools they had. The tools could not provide access to the correspondence.
The iTunes backup of this device was analyzed via Belkasoft Evidence Center (the process of it will be described in Chapter 9, iOS Forensics, in the iOS backups parsing with Belkasoft...
