Skip to content

sqlite3

Named by 2 kept items in this workspace.

Search every workspace for sqlite3. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • macOS Extended Attributes: Case Study
    writeup2025-02-15

    Used to query the com.apple.LaunchServices.QuarantineEventsV* database for quarantine event metadata during forensic investigation

  • MacOS forensic I
    writeup2020-11-22

    Used to query SQLite3 databases like Safari's Cache.db / Cache.db-journal for cached browsing data

All technologies in this workspace.