We didn't set out to build a tool. We set out to solve a challenge we kept encountering — in our own investigations, and in every SQLite training we ran.

Again and again, the same questions came up:

• "What was deleted — and when?"
• "Where is this record from — the WAL, the freelist, or the live DB?"
• "How do I explain this structure clearly in a report?"

Our students needed more than rows and queries. They needed to see the story — clearly, visually, and without friction.

So we created ED SQLite Visualizer. A tool shaped by real casework, refined in hands-on labs, and built to make forensic analysis faster, clearer, and easier to explain — even when time is short.

ED SQLite Visualizer isn't just a new interface. It's a new way to explore forensic questions — faster, more clearly, and with less friction.

It combines several advanced capabilities into one streamlined suite:

• WAL Timeline Viewer – Watch the history of a database unfold frame by frame. See when records were written, modified, or deleted.
• Smart Canvas Navigation – Visualize the full schema as an interactive map. Explore tables, connections, and key structures at a glance — even in 100+ table databases.
• Integrated Hex & Structure View – Understand pages, freelists, overflow chains, and low-level internals without losing context.
• One-Click Recovery – Extract deleted content from WAL files, freelists, and unallocated space with forensic precision.
• Built-in Evidence Tools – Work on protected copies, generate reports, and preserve data integrity through built-in SHA1 verification.

The tool was developed inside our certified training — shaped by real-world challenges, and refined through practical use. It's not meant to replace existing tools, but to give examiners something they've been missing: a more visual, connected way to understand what's really in the data.

It's already helping our students uncover answers faster. Soon, it can help you too.