인증된 고급 SQLite 포렌식 교육

Live: Delivered over 3 full days with instructor-led sessions, labs, and interactive case studies.

온디맨드: Same content, but self-paced. You get 90 days access to all videos, labs, and datasets.

Yes — all content reflects the latest SQLite structures, current forensic tools, and challenges drawn from modern mobile apps and databases.

Yes. We provide group pricing and custom delivery for teams of 5 or more, including onboarding and support for labs and access management.

No prior database expertise is required. The course starts from the ground up, guiding you through SQLite internals using visual walkthroughs, labs, and practical exercises — all with forensic application in mind.

Every section includes hands-on exercises: parsing deleted records, rebuilding overflow chains, exploring WAL/SHM files, and solving scenario-based challenges based on real-world datasets.

The course is taught by James Eichbaum, a veteran digital forensics instructor with over 15 years of experience and global recognition in mobile and database forensics. He has trained law enforcement, DFIR consultants, and forensic examiners in over 30 countries.

Perfect — this course complements those tools. You’ll learn how to validate their output, investigate unsupported apps, and recover records that often go unnoticed by automated parsing.

Yes. You’ll receive a verifiable certificate with unique ID and instructor signature. It qualifies for 24 CPE 크레딧 and meets documentation needs for legal, audit, or regulatory review.

Yes. Live participants can ask questions in-session. On-Demand participants get instructor email support and access to a curated resource library throughout their access period.

Yes. The course is built around real app data and typical case scenarios — not theory or synthetic examples. Everything you learn is applicable to your current and future cases.

Yes. You'll work through realistic CTF-style investigations designed to reinforce technical concepts with real-world data. These challenges are based on actual mobile app behavior and common investigation scenarios.

Yes — you’ll receive access to the Elusive Data SQLite Visualizer, a custom-built forensic tool for visual inspection of database structures like freelist pages, B-Trees, WAL records, and overflow chains.

Yes. All live sessions are recorded, and participants receive on-demand access to rewatch the material for up to 90 days — including walkthroughs and lab demos.

This is a deep dive — but it’s built to be accessible. You’ll go into low-level SQLite internals (WAL, B-Tree, VarInts, freelist) but everything is broken down visually and reinforced with labs and casework examples.

The labs are based on real-world app databases including messaging apps, location platforms, and social media. These are curated to simulate live case conditions, with edge cases and recoverable deleted records.

Yes. Many experienced examiners, tool developers, and agency trainers take this course to sharpen their knowledge of SQLite internals. While beginner-friendly, the material scales well for seasoned professionals looking to go deeper.

Absolutely. You'll learn to manually parse WAL and SHM files to identify hidden or deleted data not found in the main DB — and you'll see how rollback works across multiple scenarios.

Yes. The course is tool-agnostic and focuses on methods that work regardless of what forensic platform you use. You’ll learn to validate tool output and go deeper when tools don’t support a specific app or artifact.

You should have some experience in digital forensics, mobile analysis, or DFIR — but you don’t need to know how to code or have prior database training. This course teaches what you need, as you go.

Yes. SQLite is used in desktop apps, IoT devices, browsers, and cloud sync platforms. The skills you learn here apply anywhere SQLite appears, including non-mobile cases.