Skip to content

Latest commit

 

History

History
27 lines (22 loc) · 1.79 KB

README.md

File metadata and controls

27 lines (22 loc) · 1.79 KB

Parse SQLite Databases

Parse SQLite Databases plugin that parses any SQLite files and import them into the extracted content.

Install Process

This section will go over the different ways that you can install the SQLite Databases Plugin.

Only install SQLite Databases Plugin

This method is the only method that can be used on Linux or Mac.

  1. To install the Parse SQLite Databases plugin first you must download a ZIP file containing all of the plugins. This ZIP file contains a number of Autopsy plugins.
  2. Unzip the ZIP file.
  3. Move the folder named Parse_SQLite_Databases to the plugin directory.
  • To figure out the plugin directory you can go to Tools > Python Plugins inside of the Autopsy Menu System and it should open the folder where the plugin should go.
  1. Restart Autopsy if it is running.

Executable Installer (Windows Only)

  1. Download the installer.
  2. Run the installer following the prompts.

Running the Plugin

  1. To run the plugin you can right click a folder inside of your datasource and run the Run Ingestion Modules options.
  2. A popup will appear. Select Parse SQLite DB in the list of plugins. Type the name of the DB file you are attempting to parse as well as press the checkbox. SQLite DB Example Image
  3. Hit finish.
  4. Your results should appear inside of Extracted Content on the main Autopsy screen.

Need Help

If you are having problems running the software please create an issue on GitHub.