Epilog 1.0

A software tool which allows investigators to recover deleted data from the widely-used database format, SQLite.

Many devices (whether mobile phones, computers, SatNavs or other devices) store data in the SQLite database format.
Data stored in this type of database can provide a huge evidential opportunity for investigators.
Many ‘off-the-shelf’ tools can be used to view the live records in the database, but epilog from CCL-Forensics extracts deleted and de-referenced data from the database files or across a disc image or hex dump.