Practical Mobile Forensics - Fourth Edition

Working with SQLite databases

SQLite is an open source, in-process library that implements a self-contained, zero-configuration, and transactional SQL database engine. This is a complete database with multiple tables, triggers, and views that are contained in a single cross-platform file. As SQLite is portable, reliable, and small, it is a popular database format that appears on many mobile platforms.

Apple iOS devices, as with other smartphones and tablets, make heavy use of SQLite databases for data storage. Many of the built-in applications—such as Phone, Messages, Mail, Calendar, and Notes—store data in SQLite databases. Apart from this, third-party applications installed on the device also leverage SQLite databases for data storage. ...