Category Archives: SQLite

[SQLite] Analysing the Quicklook thumbnail database [MacOS]

When reviewing activity from a Mac OSX system there are a number of great artifacts to consider in your investigations. In this post I’m going to talk about the Quicklook database that stores metadata for thumbnails of files you view in the Mac Finder. When Finder session renders that thumbnail it tracks the thumbnail information

Read More

New SQLiteDiver build released!

A new beta of SQLiteDiver has been released. The graphical and console versions are now bundled into a single zip file. Version 0.5 of SQLiteDiver is available for download. You can review changelog here. The graphical version can now open SQLite databases from the command line or Windows Explorer using “Open With” and file associations.

Read More