Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20102

Mobile Phone Forensics: PList and .db Files

$
0
0
The .db files are SQLite databases and can be viewed with any SQLite viewer. I use SQLite Expert Professional. While commercial tools offer support for some applications, I would suggest you look in the databases in case there is any additional information present. The plist files can be viewed with Plist Editor for Windows as mentioned by Chris. Incidentally, you may be able to recover deleted data from the .db files should you be interested. Something along the lines of CCL's Epilog can do this for you. Both iOS and Android devices use SQLite databases for storing data so this tool can be used with more than just iOS. A lot of tables interlink with one another so be wary if you can't see all of the information that you would normally associate with a piece of data. The SMS.db is a good example of this with it's messages and handles.

Viewing all articles
Browse latest Browse all 20102

Trending Articles