This code has been forked from bring2lite . Also see the published paper by the original author of this tool: bring2lite: A Structural Concept and Tool for Forensic Data Analysis and Recovery of Deleted SQLite Records.
The tool was developed to process SQLite databases in respect of deleted records. Therefore, bring2lite is able to analyse the structures within the main database, WAL and journal files.
My contributions are as follows (checked if already done):
- Removed the GUI as this is a lot of overhead
- Update the way log files are written (escape ',')
- Make the code a module
- Python3
Licence is copied from the original author:
- CC-BY-NC
- Clone the repository
- cd into the repository
python3 setup.py install
- Process a single database main file:
main.py --filename /path/to/file --out /path/to/output/folder- Process a single journal file:
main.py --journal /path/to/journal/file --out /path/to/output/folder- Process a single WAL file:
main.py --wal /path/to/wal/file --out /path/to/output/folder- Process a single database main file:
main.py --filename /path/to/database/file --out /path/to/output/folder- Process all files within a single folder and all sub-folders:
main.py --folder /path/to/folder --out /path/to/output/folder- tqdm - a library which can be used to created progress bars
- sqlparse - this library allows to easily process SQLite statements
- 14-03-2019 - publication of version 0.1 by original author
- 07-04-2022 - Forked project from bring2lite, removed the GUI option