Something new is coming to mobile forensics
At Elusive Data, our mission has always been clear: to help forensic professionals work faster, more accurately, and with greater confidence.
We continuously update our training to reflect the latest tools, techniques, and app behaviors. And during a recent deep dive into our SQLite module, one thing stood out:
Some questions keep coming up from our students, our clients, and our own investigations:
- 🔍 "What was deleted and when?"
- 🔍 "Is this record from the WAL, the freelist, or the live database?"
- 🔍 "How are all these tables connected?"
- 🔍 "Can I trace changes across time visually?"
These aren't unusual questions. In fact, they're central to real mobile forensic work.
So we asked ourselves: what if the answers were just easier to see?
We've spent the last year building a tool inspired by those exact challenges. A tool shaped by real casework, hands-on teaching, and thousands of hours deep inside SQLite databases.
It's called ED SQLite Visualizer.
It's visual.
It's intuitive.
And it's almost ready.
We'll be sharing more soon. But if you work with SQLite in mobile forensics, we think you'll want to see this.