SQLiteVisualizer unifies visual exploration, decoding, SQL analysis, and deleted-data recovery into one seamless workflow. No exports, no tool switching, no lost context.
Built from real casework and years of forensic training, the platform lets you see database history, trace deleted records, and reveal hidden patterns with exceptional clarity and precision. The result: quicker insights, stronger accuracy, and defensible evidence when every detail matters.
The core of the platform is a visual canvas that displays every table, every relationship, every record count, and any custom views as virtual table cards. This delivers an immediate, clear understanding of how an application structures its data, helping examiners grasp the database at a glance.
SQLiteVisualizer includes integrated decoding for plists, protobufs, Base64, GZIP, JSON stitching, Markdown, GPS data, and timestamp formats, everything interpreted directly inside the platform with no exporting or external tools required.
SQLiteVisualizer provides a complete set of examiner-focused recovery tools that expose deleted, historical, and overwritten content across all SQLite storage layers. It recovers data from WAL frames with timeline views, extracts remnants from freelist pages, carves fragmented records from freeblocks, analyzes rollback-journal history, and reconstructs records with full forensic metadata for validation.
SQLiteVisualizer includes a dedicated Hex Analysis Engine built specifically for SQLite forensics, offering automatic decoding of database structures, smart context-aware templates, smooth navigation across pages and frames, fast value and timestamp interpretation, and support for reconstructing fragmented records.
SQLiteVisualizer streamlines SQL work with visual, intuitive toolsโletting you build queries directly from the canvas, create context-aware JOINs with a single click, save results as reusable virtual tables, and keep everything organized in a structured, searchable query library.
SQLiteVisualizer generates clear, defensible reports for any case, with flexible evidence and table summaries, interactive HTML output, automatic inclusion of case metadata and hash information, secure ZIP packaging options, and fully customizable report sections to match your agencyโs requirements.
SQLiteVisualizer includes a full case-management workflow designed for forensic defensibility. It works in read-only mode, creates protected evidence copies, verifies hashes across multiple algorithms, and captures case metadata and custom fields. Your analysis state and history are preserved across sessions, ensuring every step of your work remains transparent, reliable, and fully repeatable.
SQLiteVisualizer includes a built-in forensic chatbot that you can use in any language, making guidance and SQL assistance accessible to every examiner. It helps you write complex queries, explains SQLite structures like WAL and freelists in simple terms, and supports your workflow without ever accessing evidence dataโonly the schema. A faster, clearer way to get help right inside the tool.
What I appreciate most is that nothing feels hidden or confusing. I can follow how an app changes its data, notice unusual behavior, and review deleted records without struggling with the tool. It really feels like someone finally built a SQLite tool for how investigators actually work. Itโs been extremely helpful.
When I first used it during the course, it immediately made my workflow simpler. Everything I used to juggle between different tools was suddenly all in one place. No exporting, no jumping around. Iโve watched it develop over time, and itโs become something I rely on every day. It genuinely saves time and helps me find things I would have missed.
๋ชจ๋ฐ์ผ ์ฑ ๋ฐ์ดํฐ๋ฅผ ์กฐ์ฌํ๋ ์ ๋ฌธ๊ฐ๋ฅผ ์ํด ๋ง์ถคํ๋ 2025 ์ธ์ฆ ๊ต์ก์ผ๋ก SQLite ํฌ๋ ์์ ๋ง์คํฐํ์ธ์. ์ญ์ ๋ ๋ ์ฝ๋๋ฅผ ๋ฐ๊ฒฌํ๊ณ , WAL ํ์ผ์ ํด์ํ๊ณ , ํ์ค ๋๊ตฌ๊ฐ ๋ฟ์ง ์๋ ์จ๊ฒจ์ง ์ํฐํฉํธ๋ฅผ ๋ณต๊ตฌํ๋ ๋ฐฉ๋ฒ์ ๋ฐฐ์๋ณด์ธ์. ์ค์ ์ฌ๋ก์ ์๋ก์ด CTF๋ฅผ ์ค์ฌ์ผ๋ก ๊ตฌ์ถ๋ ์ด ์ค์ต ๊ณผ์ ์ ํ์ด์ง ์์ค ๋์ฝ๋ฉ, ์ฌ์ธต์ ์ธ ํฌ๋ ์ ์ธ์ฌ์ดํธ, ๊ณ ๊ธ ์กฐ์ฌ๋ฅผ ์ํ ์ค์ฉ์ ์ธ ๊ธฐ์ ์ ๊ฐ์กฐํฉ๋๋ค.
์ญ์ ๋๊ฑฐ๋, ์ปค๋ฐ๋์ง ์์๊ฑฐ๋, ๋ฎ์ด์ด SQLite ๋ฐ์ดํฐ๋ฅผ ๋ณต๊ตฌํด์ผ ํ๋์? ์ด ๊ณ ๊ธ ๋ง์ดํฌ๋ก ๊ณผ์ ์์๋ ์ค์ํ ๋ณ๊ฒฝ ์ฌํญ์ด ์์ฃผ ์๋ ํ๋ฐ์ฑ ๋ ์ด์ด์ธ WAL ๋ฐ SHM ํ์ผ์์ ์ฆ๊ฑฐ๋ฅผ ์ถ์ถํ๋ ๋ฐฉ๋ฒ์ ์๋ ค๋๋ฆฝ๋๋ค. ๋ฐ์ดํฐ ๋ฌด๊ฒฐ์ฑ์ ๊ฒ์ฆํ๊ณ , ์์ ์ฌํญ์ ์ถ์ ํ๊ณ , ๊ธฐ์กด ๋๊ตฌ๊ฐ ๋์น๋ ๋ถ๋ถ์ ์ฐพ์๋ด๋ ๋ฐฉ๋ฒ์ ๋ฐฐ์๋ณด์ธ์.
์ค์จ๋ด์์ ๋ฐฉ๋ฌธํ์ ๊ฒ์ ํ์ธํ์ต๋๋ค. ์ผํ ํธ์๋ฅผ ์ํด ๊ฐ๊ฒฉ์ ์ค์จ๋ด ํฌ๋ก๋๋ก ์ ๋ฐ์ดํธํ์ต๋๋ค. ๋์ ๋ฏธ๊ตญ ๋ฌ๋ฌ๋ฅผ ์ฌ์ฉํ์ธ์. ํด์ง
I didnโt expect a SQLite tool to make this big a difference, but honestly, itโs shaved hours off my cases. The moment I open a database, I actually understand what Iโm looking at. And the deleted data it uncoveredโฆ we would never have found that with our old workflow! Itโs just made my job easier, plain and simple.