{"id":2992,"date":"2025-01-22T17:26:55","date_gmt":"2025-01-22T17:26:55","guid":{"rendered":"https:\/\/elusivedata.io\/?p=2992"},"modified":"2025-07-18T18:04:33","modified_gmt":"2025-07-18T18:04:33","slug":"overflow-pages","status":"publish","type":"post","link":"https:\/\/elusivedata.io\/nb\/overflow-pages\/","title":{"rendered":"SQLite Overflow Pages: Hvordan digital kriminalteknikk gjenoppretter skjulte data"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"2992\" class=\"elementor elementor-2992\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-63014a9 e-flex e-con-boxed e-con e-parent\" data-id=\"63014a9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ff99ca6 elementor-widget elementor-widget-text-editor\" data-id=\"ff99ca6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-pm-slice=\"1 1 []\">Innledning: Puslespillet med overl\u00f8pssider<\/h2><p>Tenk deg at du kj\u00f8per en plakat som er for stor for rammene du har hjemme. For \u00e5 kunne vise den ordentlig, m\u00e5 du klippe den opp i seksjoner slik at den f\u00e5r plass i de tilgjengelige rammene. Det samme prinsippet gjelder for SQLite-databaser n\u00e5r de h\u00e5ndterer store poster - de deler dem opp i deler og lagrer dem p\u00e5 flere sider. Det er her <strong>overl\u00f8pssider<\/strong> ...kom inn.<\/p><p>Overflyt-sider lagrer data som ikke f\u00e5r plass p\u00e5 en enkelt SQLite-database-side (vanligvis <strong>4 096 byte<\/strong>). Disse sidene er <strong>knyttet sammen<\/strong>De danner en kjede som kriminalteknikere m\u00e5 rekonstruere for \u00e5 gjenopprette komplette data. Hvis analytikerne ikke f\u00f8lger overl\u00f8psstrukturen, risikerer de \u00e5 hente <strong>ufullstendige eller \u00f8delagte bevis<\/strong>.<\/p><p>I denne artikkelen skal vi se n\u00e6rmere p\u00e5 hvordan overflow-sider fungerer, hvorfor de er viktige i kriminaltekniske unders\u00f8kelser, og hvordan du trinn for trinn kan hente ut fragmenterte data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-07dd17e e-flex e-con-boxed e-con e-parent\" data-id=\"07dd17e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bfa0591 elementor-widget elementor-widget-text-editor\" data-id=\"bfa0591\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-pm-slice=\"1 1 []\">Hva er overflytsider i SQLite?<\/h2><p>SQLite-databaser tildeler en fast sidest\u00f8rrelse (f.eks, <strong>4 096 byte<\/strong>). Men n\u00e5r en post - for eksempel et bilde som er lagret som en <strong>BLOB (Binary Large Object)<\/strong>-overskrider denne st\u00f8rrelsen, <strong>overfl\u00f8dige data flyter over p\u00e5 overflow-sider<\/strong>.<\/p><h3><strong>De viktigste erfaringene:<\/strong><\/h3><p>\u2705 Overl\u00f8pssider <strong>forhindre store poster<\/strong> fra \u00e5 monopolisere en enkelt side.<br \/>\u2705 De er <strong>knyttet sammen i en kjede<\/strong>, med utgangspunkt i hovedsiden.<br \/>\u2705 <strong>Kriminaltekniske analytikere<\/strong> m\u00e5 rekonstruere disse kjedene for \u00e5 hente ut komplette data.<\/p><p>\u00c5 forst\u00e5 hvordan overflow-sider fungerer, er avgj\u00f8rende for kriminaltekniske unders\u00f8kelser.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-18afbbf e-flex e-con-boxed e-con e-parent\" data-id=\"18afbbf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3cb19af elementor-widget elementor-widget-text-editor\" data-id=\"3cb19af\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3847\" class=\"ember-view reader-text-block__heading-3\">Oversikt p\u00e5 h\u00f8yt niv\u00e5: Hvordan overflytsider fungerer<\/h3><p id=\"ember3848\" class=\"ember-view reader-text-block__paragraph\">La oss se p\u00e5 f\u00f8lgende eksempler for \u00e5 illustrere konseptet med overflow-sider:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d7b9343 e-con-full e-flex e-con e-parent\" data-id=\"d7b9343\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-54a5d4e elementor-widget elementor-widget-text-editor\" data-id=\"54a5d4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>1. Fragmentert bilderepresentasjon<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ada5370 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"ada5370\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"702\" height=\"1024\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames-702x1024.png\" class=\"attachment-large size-large wp-image-3001\" alt=\"Darth Vader frames in SQLite BLOB \u2014 forensic image carving from database tutorial\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames-702x1024.png 702w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames-206x300.png 206w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames-768x1120.png 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames-600x875.png 600w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Darth_Frames.png 1015w\" sizes=\"(max-width: 702px) 100vw, 702px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Illustrasjon av fragmentert datalagring i SQLite: Et stort bilde er delt opp over flere rammer, noe som viser hvordan overflow-sider h\u00e5ndterer store BLOB-er.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a17d3cb elementor-widget elementor-widget-text-editor\" data-id=\"a17d3cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Denne visualiseringen viser hvordan store BLOB-er, for eksempel bilder, lagres i SQLite. Bildet er delt opp i flere seksjoner, akkurat som en overflow-side lagrer fragmenterte data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e04d0cf e-flex e-con-boxed e-con e-parent\" data-id=\"e04d0cf\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f201d97 elementor-widget elementor-widget-text-editor\" data-id=\"f201d97\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>2. Data lagret p\u00e5 \u00e9n enkelt side<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-87213f9 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"87213f9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"993\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-825x1024.png\" class=\"attachment-large size-large wp-image-3002\" alt=\"Full frame SQLite BLOB image \u2014 forensic recovery of complete image from database\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-825x1024.png 825w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-242x300.png 242w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-768x953.png 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-1238x1536.png 1238w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame-600x745.png 600w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/FullFrame.png 1348w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Et bilde av et F-16-jetfly som er fullstendig lagret p\u00e5 \u00e9n enkelt SQLite-side, noe som viser et ideelt tilfelle der det ikke er behov for overflow-sider.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f992289 elementor-widget elementor-widget-text-editor\" data-id=\"f992289\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Her f\u00e5r et bilde plass p\u00e5 \u00e9n databaseside, slik at det ikke er behov for overl\u00f8pssider.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5ce5f77 e-flex e-con-boxed e-con e-parent\" data-id=\"5ce5f77\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-75364cc elementor-widget elementor-widget-text-editor\" data-id=\"75364cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>3. Data deles over flere sider<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-90c504d elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"90c504d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"585\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-1024x749.png\" class=\"attachment-large size-large wp-image-3005\" alt=\"Chain in orange \u2014 digital forensics investigation scenario evidence image\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-1024x749.png 1024w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-300x219.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-768x562.png 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-1536x1123.png 1536w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-2048x1497.png 2048w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/chain-in-orange-600x439.png 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Sekskantet representasjon av et bilde som er lagret p\u00e5 tvers av SQLite-side 7, 3 og 5, og som krever kriminalteknisk rekonstruksjon.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-080fac6 elementor-widget elementor-widget-text-editor\" data-id=\"080fac6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Dette eksemplet illustrerer hvordan data lagres p\u00e5 en ikke-sammenhengende m\u00e5te, noe som krever kriminalteknisk analyse for \u00e5 rekonstruere dem korrekt.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2f60c82 e-flex e-con-boxed e-con e-parent\" data-id=\"2f60c82\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-32523f8 elementor-widget elementor-widget-text-editor\" data-id=\"32523f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>4. Rekonstruere data fra overl\u00f8pssider<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-14bd750 elementor-widget__width-initial elementor-widget elementor-widget-image\" data-id=\"14bd750\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"910\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-900x1024.png\" class=\"attachment-large size-large wp-image-3006\" alt=\"Firearm image attachment \u2014 digital forensics mobile evidence in SQLite training scenario\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-900x1024.png 900w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-264x300.png 264w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-768x874.png 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-1350x1536.png 1350w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun-600x683.png 600w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/gun.png 1682w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Et vellykket rekonstruert bilde fra fragmenterte SQLite-sider, som illustrerer den kriminaltekniske prosessen med gjenfinning av overflow-sider.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1840ae8 elementor-widget elementor-widget-text-editor\" data-id=\"1840ae8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Ved \u00e5 f\u00f8lge overl\u00f8pssidepekere kan kriminalteknikere sette sammen fragmenterte data p\u00e5 nytt.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-444d494 e-flex e-con-boxed e-con e-parent\" data-id=\"444d494\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bdfb66e elementor-widget elementor-widget-text-editor\" data-id=\"bdfb66e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3862\" class=\"ember-view reader-text-block__heading-3\">Den rettsmedisinske betydningen av overflytsider<\/h3><p id=\"ember3863\" class=\"ember-view reader-text-block__paragraph\">Mange <strong>meldingsapper, mobilapplikasjoner og databaser<\/strong> lagre brukerprofilbilder, chat-logger og vedlegg i SQLite. N\u00e5r bilder og dokumenter spenner over flere sider, m\u00e5 kriminalteknikere forst\u00e5 overflow-strukturer for \u00e5 kunne hente ut dataene p\u00e5 riktig m\u00e5te.<\/p><h3 id=\"ember3864\" class=\"ember-view reader-text-block__heading-3\">Rettsmedisinske utfordringer:<\/h3><ul><li><strong>Fragmenterte data:<\/strong> BLOB-er (for eksempel bilder) er ofte delt over flere sider.<\/li><li><strong>Pekerbasert gjenfinning:<\/strong> Analytikere m\u00e5 f\u00f8lge SQLites overflow-sidepekere for \u00e5 rekonstruere hele bildet eller filen.<\/li><li><strong>Utskj\u00e6ringsproblemer:<\/strong> Hvis du bare s\u00f8ker etter en JPEG-header (FFD8FF) og -footer (FFD9), kan det mislykkes fordi de kan finnes p\u00e5 separate sider.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-62e24c1 e-flex e-con-boxed e-con e-parent\" data-id=\"62e24c1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9e00fa5 elementor-widget elementor-widget-text-editor\" data-id=\"9e00fa5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3866\" class=\"ember-view reader-text-block__heading-3\">Eksempel fra den virkelige verden: Trekke ut et profilbilde fra Overflow-sider<\/h3><p id=\"ember3867\" class=\"ember-view reader-text-block__paragraph\">La oss n\u00e5 g\u00e5 gjennom en trinnvis rettsmedisinsk gjenoppretting av et bilde som er lagret i en SQLite-database.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cc2a365 e-flex e-con-boxed e-con e-parent\" data-id=\"cc2a365\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1b2831c elementor-widget elementor-widget-text-editor\" data-id=\"1b2831c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3868\" class=\"ember-view reader-text-block__heading-3\">Finn BLOB-en i databasen<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-626b247 elementor-widget elementor-widget-image\" data-id=\"626b247\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"335\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/DB-Viewer-Contacts-Table-with-BLOB.png\" class=\"attachment-large size-large wp-image-3007\" alt=\"DB Viewer contacts table with BLOB data \u2014 forensic SQLite database examination\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/DB-Viewer-Contacts-Table-with-BLOB.png 899w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/DB-Viewer-Contacts-Table-with-BLOB-300x126.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/DB-Viewer-Contacts-Table-with-BLOB-768x322.png 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/DB-Viewer-Contacts-Table-with-BLOB-600x252.png 600w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">DB Browser for SQLite viser en kontakttabell med profilbilder lagret som BLOB-er, et viktig trinn i rettsmedisinsk utvinning.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-63cd81f elementor-widget elementor-widget-text-editor\" data-id=\"63cd81f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Ved hjelp av <strong>DB-nettleser for SQLite<\/strong>identifiserer kriminalteknikere posten som inneholder profilbildet i <code>kontakter<\/code> bord.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-47e1bc8 e-flex e-con-boxed e-con e-parent\" data-id=\"47e1bc8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f2d207d elementor-widget elementor-widget-text-editor\" data-id=\"f2d207d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3871\" class=\"ember-view reader-text-block__heading-3\">Identifiser BLOB-lengden i hex<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b6fc8b elementor-widget elementor-widget-image\" data-id=\"3b6fc8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"675\" height=\"410\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record.png\" class=\"attachment-large size-large wp-image-3008\" alt=\"SQLite Ali record forensic analysis \u2014 examining database record structure and BLOB data\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record.png 675w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-300x182.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-600x364.png 600w\" sizes=\"(max-width: 675px) 100vw, 675px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Varint 0xB135 konverteres til en cellelengde p\u00e5 6 325 byte (ikke inkludert selve varinten eller rad-ID-en)<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e5b6996 elementor-widget elementor-widget-text-editor\" data-id=\"e5b6996\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Ved hjelp av <strong>HxD<\/strong>med en hex-editor, finner de posthodet, som inneholder en <strong>VARINT<\/strong> som bestemmer BLOB-lengden.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ca910b4 e-flex e-con-boxed e-con e-parent\" data-id=\"ca910b4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1e2c7ba elementor-widget elementor-widget-text-editor\" data-id=\"1e2c7ba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3874\" class=\"ember-view reader-text-block__heading-3\">Bekreft bildest\u00f8rrelsen<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6cd7bee elementor-widget elementor-widget-image\" data-id=\"6cd7bee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"675\" height=\"410\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-BLOB-Length.png\" class=\"attachment-large size-large wp-image-3009\" alt=\"SQLite Ali record BLOB length \u2014 forensic analysis of image BLOB size in database\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-BLOB-Length.png 675w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-BLOB-Length-300x182.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Ali-Record-BLOB-Length-600x364.png 600w\" sizes=\"(max-width: 675px) 100vw, 675px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Uthevet VARINT i HxD viser den totale bildest\u00f8rrelsen (6 325 byte), noe som bekrefter at den overskrider standard SQLite-sidest\u00f8rrelse.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a2b42d elementor-widget elementor-widget-text-editor\" data-id=\"2a2b42d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Den andre VARINT-verdien i posthodet angir bildets st\u00f8rrelse. I dette tilfellet er den totale st\u00f8rrelsen <strong>6 325 byte<\/strong>, som overskrider sidebegrensningen.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9d6f237 e-flex e-con-boxed e-con e-parent\" data-id=\"9d6f237\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3d1acd4 elementor-widget elementor-widget-text-editor\" data-id=\"3d1acd4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3877\" class=\"ember-view reader-text-block__heading-3\">F\u00f8lg overl\u00f8pspekeren<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f09796d elementor-widget elementor-widget-image\" data-id=\"f09796d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"668\" height=\"575\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/JPEG-Part-1-highlighted.png\" class=\"attachment-large size-large wp-image-3010\" alt=\"JPEG Part 1 highlighted in SQLite \u2014 forensic analysis of image BLOB header bytes\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/JPEG-Part-1-highlighted.png 668w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/JPEG-Part-1-highlighted-300x258.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/JPEG-Part-1-highlighted-600x516.png 600w\" sizes=\"(max-width: 668px) 100vw, 668px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">SQLite-overl\u00f8pspeker nederst p\u00e5 siden, som leder datafortsettelsen til side 4 for videre henting.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c9d3ecd elementor-widget elementor-widget-text-editor\" data-id=\"c9d3ecd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Nederst p\u00e5 hovedsiden vises en <strong>peker p\u00e5 fire byte<\/strong> f\u00f8rer til <strong>side 4<\/strong>som inneholder den neste delen av bildet.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f11c8b4 e-flex e-con-boxed e-con e-parent\" data-id=\"f11c8b4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1abbf8b elementor-widget elementor-widget-text-editor\" data-id=\"1abbf8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3880\" class=\"ember-view reader-text-block__heading-3\">Unders\u00f8k overl\u00f8pssiden<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-653935e elementor-widget elementor-widget-image\" data-id=\"653935e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"668\" height=\"575\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/page4-overflow.png\" class=\"attachment-large size-large wp-image-3012\" alt=\"SQLite page 4 overflow \u2014 forensic analysis of SQLite overflow page structure\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/page4-overflow.png 668w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/page4-overflow-300x258.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/page4-overflow-600x516.png 600w\" sizes=\"(max-width: 668px) 100vw, 668px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Sekskantbilde av et fragmentert bilde fullt uthevet, klart for manuell ekstraksjon og kriminalteknisk rekonstruksjon.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e7172c3 elementor-widget elementor-widget-text-editor\" data-id=\"e7172c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">De fire f\u00f8rste byte p\u00e5 side 4 angir om det f\u00f8lger en ny overflow-side. Siden verdien er <code>0x00000000<\/code>dette er <strong>siste overl\u00f8psside<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ca99635 e-flex e-con-boxed e-con e-parent\" data-id=\"ca99635\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2fede4c elementor-widget elementor-widget-text-editor\" data-id=\"2fede4c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3883\" class=\"ember-view reader-text-block__heading-3\">Trekk ut og rekonstruer bildet<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b1d0297 elementor-widget elementor-widget-image\" data-id=\"b1d0297\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"668\" height=\"517\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/carved-image.png\" class=\"attachment-large size-large wp-image-3011\" alt=\"Carved image from SQLite BLOB \u2014 forensic file carving technique for image recovery\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/carved-image.png 668w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/carved-image-300x232.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/carved-image-600x464.png 600w\" sizes=\"(max-width: 668px) 100vw, 668px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Sekskantbilde av et fragmentert bilde fullt uthevet, klart for manuell ekstraksjon og kriminalteknisk rekonstruksjon.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8b9f005 elementor-widget elementor-widget-text-editor\" data-id=\"8b9f005\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-pm-slice=\"1 1 []\">Rettsmedisinske analytikere trekker ut <strong>6 292 byte<\/strong> av bildet fra begge sidene og rekonstruere det manuelt.<\/p><p>\ud83d\udccc<strong><em>De fire byte-pekerne er IKKE en del av dataene som skal inkluderes i det utsk\u00e5rne bildet<\/em><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7733448 e-flex e-con-boxed e-con e-parent\" data-id=\"7733448\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a77b7b5 elementor-widget elementor-widget-text-editor\" data-id=\"a77b7b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3887\" class=\"ember-view reader-text-block__heading-3\">Bekreft det gjenopprettede bildet<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fd6e693 elementor-widget elementor-widget-image\" data-id=\"fd6e693\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"608\" height=\"509\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/image.png\" class=\"attachment-large size-large wp-image-3013\" alt=\"Digital forensics training image \u2014 Elusive Data DFIR course content\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/image.png 608w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/image-300x251.png 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/image-600x502.png 600w\" sizes=\"(max-width: 608px) 100vw, 608px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Hentet ut bildeGjenopprettet profilbilde fra SQLite overflow-sider, vellykket utsk\u00e5ret og vist i Windows Photo Viewer.<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-907c031 elementor-widget elementor-widget-text-editor\" data-id=\"907c031\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p id=\"ember3889\" class=\"ember-view reader-text-block__paragraph\">Det ekstraherte bildet er n\u00e5 fullstendig gjenopprettet og kan vises.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e79a6d9 e-flex e-con-boxed e-con e-parent\" data-id=\"e79a6d9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-566be41 elementor-widget elementor-widget-text-editor\" data-id=\"566be41\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 id=\"ember3890\" class=\"ember-view reader-text-block__heading-3\">Avsluttende tanker: Betydningen av analyse av overflytsider<\/h3><p id=\"ember3891\" class=\"ember-view reader-text-block__paragraph\">I kriminaltekniske unders\u00f8kelser kan det \u00e5 overse overflow-sider f\u00f8re til <strong>tap av kritisk bevismateriale<\/strong>. \u00c5 forst\u00e5 SQLites lagringsmekanisme er avgj\u00f8rende for \u00e5 <strong>n\u00f8yaktig datauttrekk og rekonstruksjon<\/strong>.<\/p><h3 id=\"ember3892\" class=\"ember-view reader-text-block__heading-3\">Viktig rettsmedisinsk innsikt:<\/h3><p id=\"ember3893\" class=\"ember-view reader-text-block__paragraph\">\u2714\ufe0f Alltid <strong>se etter overfylte sider<\/strong>n\u00e5r du analyserer store poster.<\/p><p id=\"ember3894\" class=\"ember-view reader-text-block__paragraph\">\u2714\ufe0f F\u00f8lg SQLites <strong>overl\u00f8pspekere<\/strong>forsiktig.<\/p><p id=\"ember3895\" class=\"ember-view reader-text-block__paragraph\">\u2714\ufe0f Simple <strong>filskj\u00e6ringsteknikker<\/strong> fungerer kanskje ikke p\u00e5 grunn av ikke-sammenhengende lagring.<\/p><p data-pm-slice=\"1 1 []\">Enten man analyserer <strong>chat-databaser, kontaktlister eller programlogger<\/strong>m\u00e5 rettsmedisinere v\u00e6re dyktige til \u00e5 gjenopprette fragmenterte data.<\/p><p id=\"ember3897\" class=\"ember-view reader-text-block__paragraph\">\ud83d\udca1 <strong>Har du st\u00f8tt p\u00e5 fragmenterte data i SQLite-forensics? Hvordan g\u00e5r du frem for \u00e5 analysere overflow-sider? Del din innsikt nedenfor!<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>SQLite overflow-sider lagrer fragmenterte data som ikke f\u00e5r plass p\u00e5 \u00e9n enkelt databaseside, noe som gj\u00f8r det n\u00f8dvendig for kriminalteknikere \u00e5 rekonstruere dem for \u00e5 gjenopprette fullstendig bevismateriale.<\/p>","protected":false},"author":1,"featured_media":2993,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[21],"tags":[],"class_list":["post-2992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile-forensics"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SQLite Overflow Pages: Hidden Data Recovery in Forensics<\/title>\n<meta name=\"description\" content=\"Learn how SQLite overflow pages impact forensic analysis and what tools and methods are used to recover hidden or lost data.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elusivedata.io\/nb\/overflow-pages\/\" \/>\n<meta property=\"og:locale\" content=\"nb_NO\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQLite Overflow Pages: How Digital Forensics Recovers Hidden Data\" \/>\n<meta property=\"og:description\" content=\"Learn how SQLite overflow pages impact forensic analysis and what tools and methods are used to recover hidden or lost data.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elusivedata.io\/nb\/overflow-pages\/\" \/>\n<meta property=\"og:site_name\" content=\"Elusive Data\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-22T17:26:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-18T18:04:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0-1024x574.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"574\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"James Eichbaum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Skrevet av\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Eichbaum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Ansl. lesetid\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutter\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/\"},\"author\":{\"name\":\"James Eichbaum\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\"},\"headline\":\"SQLite Overflow Pages: How Digital Forensics Recovers Hidden Data\",\"datePublished\":\"2025-01-22T17:26:55+00:00\",\"dateModified\":\"2025-07-18T18:04:33+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/\"},\"wordCount\":932,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png\",\"articleSection\":[\"Mobile Forensics\"],\"inLanguage\":\"nb-NO\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/\",\"name\":\"SQLite Overflow Pages: Hidden Data Recovery in Forensics\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png\",\"datePublished\":\"2025-01-22T17:26:55+00:00\",\"dateModified\":\"2025-07-18T18:04:33+00:00\",\"description\":\"Learn how SQLite overflow pages impact forensic analysis and what tools and methods are used to recover hidden or lost data.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#breadcrumb\"},\"inLanguage\":\"nb-NO\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nb-NO\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#primaryimage\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png\",\"width\":2912,\"height\":1632,\"caption\":\"Digital forensics metaphor: fighter jet puzzle representing data reconstruction from SQLite overflow pages\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/overflow-pages\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/elusivedata.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQLite Overflow Forensics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"name\":\"ElusiveData\",\"description\":\"Excellence in Digital Forensics Training and Consulting\",\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elusivedata.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nb-NO\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\",\"name\":\"ElusiveData\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nb-NO\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"width\":2560,\"height\":370,\"caption\":\"ElusiveData\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@elusivedata\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\",\"name\":\"James Eichbaum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nb-NO\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"caption\":\"James Eichbaum\"},\"sameAs\":[\"http:\\\/\\\/elusivedata.io\"],\"url\":\"https:\\\/\\\/elusivedata.io\\\/nb\\\/author\\\/eichbaumjamesgmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SQLite Overflow Pages: Gjenoppretting av skjulte data i kriminalteknikk","description":"L\u00e6r hvordan SQLite-overl\u00f8pssider p\u00e5virker kriminaltekniske analyser, og hvilke verkt\u00f8y og metoder som brukes for \u00e5 gjenopprette skjulte eller tapte data.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elusivedata.io\/nb\/overflow-pages\/","og_locale":"nb_NO","og_type":"article","og_title":"SQLite Overflow Pages: How Digital Forensics Recovers Hidden Data","og_description":"Learn how SQLite overflow pages impact forensic analysis and what tools and methods are used to recover hidden or lost data.","og_url":"https:\/\/elusivedata.io\/nb\/overflow-pages\/","og_site_name":"Elusive Data","article_published_time":"2025-01-22T17:26:55+00:00","article_modified_time":"2025-07-18T18:04:33+00:00","og_image":[{"width":1024,"height":574,"url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0-1024x574.png","type":"image\/png"}],"author":"James Eichbaum","twitter_card":"summary_large_image","twitter_misc":{"Skrevet av":"James Eichbaum","Ansl. lesetid":"7 minutter"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/elusivedata.io\/overflow-pages\/#article","isPartOf":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/"},"author":{"name":"James Eichbaum","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436"},"headline":"SQLite Overflow Pages: How Digital Forensics Recovers Hidden Data","datePublished":"2025-01-22T17:26:55+00:00","dateModified":"2025-07-18T18:04:33+00:00","mainEntityOfPage":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/"},"wordCount":932,"commentCount":0,"publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"image":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png","articleSection":["Mobile Forensics"],"inLanguage":"nb-NO","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/elusivedata.io\/overflow-pages\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/elusivedata.io\/overflow-pages\/","url":"https:\/\/elusivedata.io\/overflow-pages\/","name":"SQLite Overflow Pages: Gjenoppretting av skjulte data i kriminalteknikk","isPartOf":{"@id":"https:\/\/elusivedata.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/#primaryimage"},"image":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png","datePublished":"2025-01-22T17:26:55+00:00","dateModified":"2025-07-18T18:04:33+00:00","description":"L\u00e6r hvordan SQLite-overl\u00f8pssider p\u00e5virker kriminaltekniske analyser, og hvilke verkt\u00f8y og metoder som brukes for \u00e5 gjenopprette skjulte eller tapte data.","breadcrumb":{"@id":"https:\/\/elusivedata.io\/overflow-pages\/#breadcrumb"},"inLanguage":"nb-NO","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elusivedata.io\/overflow-pages\/"]}]},{"@type":"ImageObject","inLanguage":"nb-NO","@id":"https:\/\/elusivedata.io\/overflow-pages\/#primaryimage","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/ik3b0mb_An_incomplete_100_piece_jigsaw_puzzle_of_a_photo_realis_4054e326-9037-4c6d-bcd8-9554e04d5ff0.png","width":2912,"height":1632,"caption":"Digital forensics metaphor: fighter jet puzzle representing data reconstruction from SQLite overflow pages"},{"@type":"BreadcrumbList","@id":"https:\/\/elusivedata.io\/overflow-pages\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elusivedata.io\/"},{"@type":"ListItem","position":2,"name":"SQLite Overflow Forensics"}]},{"@type":"WebSite","@id":"https:\/\/elusivedata.io\/#website","url":"https:\/\/elusivedata.io\/","name":"ElusiveData","description":"Fremragende oppl\u00e6ring og r\u00e5dgivning innen digital etterforskning","publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elusivedata.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nb-NO"},{"@type":"Organization","@id":"https:\/\/elusivedata.io\/#organization","name":"ElusiveData","url":"https:\/\/elusivedata.io\/","logo":{"@type":"ImageObject","inLanguage":"nb-NO","@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","width":2560,"height":370,"caption":"ElusiveData"},"image":{"@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@elusivedata"]},{"@type":"Person","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436","name":"James Eichbaum","image":{"@type":"ImageObject","inLanguage":"nb-NO","@id":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","url":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","caption":"James Eichbaum"},"sameAs":["http:\/\/elusivedata.io"],"url":"https:\/\/elusivedata.io\/nb\/author\/eichbaumjamesgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/posts\/2992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/comments?post=2992"}],"version-history":[{"count":37,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/posts\/2992\/revisions"}],"predecessor-version":[{"id":7313,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/posts\/2992\/revisions\/7313"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/media\/2993"}],"wp:attachment":[{"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/media?parent=2992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/categories?post=2992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elusivedata.io\/nb\/wp-json\/wp\/v2\/tags?post=2992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}