{"id":2925,"date":"2025-01-08T10:37:11","date_gmt":"2025-01-08T10:37:11","guid":{"rendered":"https:\/\/elusivedata.io\/?p=2925"},"modified":"2025-08-14T19:31:30","modified_gmt":"2025-08-14T19:31:30","slug":"decoding-varints-a-critical-skill-in-sqlite-forensics","status":"publish","type":"post","link":"https:\/\/elusivedata.io\/nl\/decoding-varints-a-critical-skill-in-sqlite-forensics\/","title":{"rendered":"Varints decoderen: Een kritische vaardigheid in SQLite forensisch onderzoek"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"2925\" class=\"elementor elementor-2925\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f400ea3 e-flex e-con-boxed e-con e-parent\" data-id=\"f400ea3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-751fdcd elementor-widget elementor-widget-heading\" data-id=\"751fdcd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Inleiding<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a11b574 elementor-widget elementor-widget-text-editor\" data-id=\"a11b574\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Mijn eerste kennismaking met varints was vele jaren geleden tijdens een digitaal forensisch onderzoek van een iPhone 3GS in een onderzoek naar moord en brandstichting.<\/strong> Tot dan toe had mijn forensisch werk voornamelijk betrekking op feature telefoons, met name CDMA apparaten met BREW. Elk tekstbericht werd opgeslagen in een eigen bestand, met een consistente offset en een duidelijke hexadecimale waarde die de lengte van het bericht aangaf. Het was een voorspelbaar en vertrouwd proces.<\/p>\n<p>De iPhone stelde me echter voor een geheel nieuwe uitdaging. Berichten werden niet langer opgeslagen als individuele bestanden, maar als records in een database. In tegenstelling tot de eenvoud van functietelefoons werd de lengte van een berichtenreeks niet gedefinieerd door een duidelijke hexadecimale waarde. In plaats daarvan moest ik door SQLite databases navigeren en de payloads van records leren ontleden. Hier kwam ik het volgende tegen <strong>varints-variabele-lengte gehele getallen<\/strong>-een compacte en effici\u00ebnte manier om gegevens te coderen. Het begrijpen van varints werd cruciaal toen ik de databasestructuur ontrafelde en belangrijk bewijs eruit haalde. In dit geval leidde het beheersen van varints tot belastende bevindingen die uiteindelijk hielpen bij de veroordeling van de verdachte voor brandstichting en moord.<\/p>\n<p>Varints zijn een fundamenteel onderdeel van SQLite databases en maken effici\u00ebnte codering mogelijk van gehele getallen die de lengte van cellen, records en specifieke velden defini\u00ebren. Voor digitaal forensisch onderzoekers is het decoderen van varints essentieel voor het blootleggen van kritieke informatie in databasebestanden. Deze compacte integers spelen een belangrijke rol bij het in kaart brengen van tabelstructuren, het identificeren van record payloads en het herstellen van verwijderde of verborgen gegevens.<\/p>\n<ul>\n<li>Deze blogpost onderzoekt de vitale rol die varints spelen in SQLite forensisch onderzoek. Ik introduceer <a href=\"https:\/\/elusivedata.io\/nl\/tools-varint-calculator\/?v=efad7abb323e\" style=\"\">VarInt rekenmachine<\/a>, een gratis hulpmiddel dat is ontworpen om het decoderingsproces te vereenvoudigen, en leidt je door een tutorial om je te helpen deze kennis toe te passen in je onderzoeken. Van het ontleden van SQLite database-items tot het reconstrueren van verwijderde records, het begrijpen van varints is een vaardigheid die elke forensisch onderzoeker in zijn gereedschapskist moet hebben. Als je deze technieken wilt toepassen in echte zaken, dan is onze <a href=\"https:\/\/elusivedata.io\/nl\/sqlite-forensics\/?v=efad7abb323e\">Cursus Gecertificeerd SQLite Forensisch Onderzoek<\/a> behandelt varints, freelists, overflowpagina's en meer door middel van hands-on labs en praktische uitdagingen.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ee35c3 elementor-cta--layout-image-above elementor-cta--skin-classic elementor-animated-content elementor-bg-transform elementor-bg-transform-zoom-in elementor-widget elementor-widget-call-to-action\" data-id=\"8ee35c3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"call-to-action.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<a class=\"elementor-cta\" href=\"https:\/\/elusivedata.io\/nl\/sqlite-forensics\/?v=efad7abb323e\">\n\t\t\t\t\t<div class=\"elementor-cta__bg-wrapper\">\n\t\t\t\t<div class=\"elementor-cta__bg elementor-bg\" style=\"background-image: url(https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/06\/SQLite-Forensics-Mobile-Apps-1024x576.jpg);\" role=\"img\" aria-label=\"SQLite forensisch onderzoek in mobiele apps zoals Instagram, Telegram, WhatsApp en Messenger - onthul verborgen gegevens uit echte databases.\"><\/div>\n\t\t\t\t<div class=\"elementor-cta__bg-overlay\"><\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-cta__content\">\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-cta__title elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tLeer varints identificeren en decoderen om kritieke gegevens uit SQLite-databases te herstellen en te interpreteren\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__description elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tOnze gecertificeerde SQLite Forensics Training neemt je mee van het identificeren van deze compacte gehele getallen tot het volledig interpreteren van database structuren, het herstellen van verwijderde records en het valideren van tool output.\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__button-wrapper elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t<span class=\"elementor-cta__button elementor-button elementor-size-\">\n\t\t\t\t\t\tMeer informatie \u2192\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0a9f034 e-flex e-con-boxed e-con e-parent\" data-id=\"0a9f034\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2d15b32 elementor-widget elementor-widget-heading\" data-id=\"2d15b32\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Varints begrijpen: Ze herkennen en decoderen<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a5cdd5 elementor-widget elementor-widget-text-editor\" data-id=\"1a5cdd5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Om dieper in SQLite en digitaal forensisch onderzoek te duiken, is een belangrijke vaardigheid die je moet begrijpen <strong>gehele getallen met variabele lengte (varints)<\/strong>. Deze compacte getallen komen overal voor in SQLite databases en helpen het systeem ruimte te besparen door zo weinig mogelijk bytes te gebruiken om waarden op te slaan. Maar ze kunnen ook lastig te vinden en te decoderen zijn als je niet weet waar je op moet letten. Laten we het stap voor stap uitwerken.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-440d395 elementor-widget elementor-widget-heading\" data-id=\"440d395\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Wat is een Varint?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0a4ead6 elementor-widget elementor-widget-text-editor\" data-id=\"0a4ead6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Een varint is een speciale manier om getallen op te slaan waarbij de grootte van het getal bepaalt hoeveel bytes worden gebruikt. In tegenstelling tot gehele getallen met een vaste lengte (bijvoorbeeld 4 bytes of 8 bytes), kan een varint zo klein zijn als 1 byte of zo groot als 9 bytes. Deze flexibiliteit maakt varints ruimte-effici\u00ebnt, maar ook lastiger te interpreteren.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a4470c9 e-flex e-con-boxed e-con e-parent\" data-id=\"a4470c9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b69e6a3 elementor-widget elementor-widget-heading\" data-id=\"b69e6a3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Waar vind je Varints?<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1606c9a elementor-widget elementor-widget-text-editor\" data-id=\"1606c9a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In SQLite-databases worden varints gebruikt om te coderen:<\/p><ul><li>De lengte van cellen of records in een databasepagina.<\/li><li>Rij-ID's die records uniek identificeren.<\/li><li>De lengte van de gegevens in de payload van een record.<\/li><li>Diverse andere waarden met betrekking tot de databasestructuur.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-313b44c e-flex e-con-boxed e-con e-parent\" data-id=\"313b44c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7398cff elementor-widget elementor-widget-heading\" data-id=\"7398cff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">De sleutel tot het lezen van Varints: De markeerbit<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-364928d elementor-widget elementor-widget-text-editor\" data-id=\"364928d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Het eerste wat je moet weten als je een varint leest, is hoe je de lengte kunt bepalen. Elke byte in een varint heeft een <strong>markeerbit<\/strong> (het meest significante bit, of MSB) die je vertelt of er rechts nog een byte is die deel uitmaakt van dezelfde varint:<\/p><ul><li><strong>Als de markeerbit 1 is<\/strong>maakt de volgende byte ook deel uit van de varint.<\/li><li><strong>Als de markeerbit 0 is<\/strong>Je hebt het einde van de varint bereikt.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f2113ff e-flex e-con-boxed e-con e-parent\" data-id=\"f2113ff\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b63438 elementor-widget elementor-widget-heading\" data-id=\"8b63438\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Twee manieren om de lengte van Varints te decoderen<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32573a4 elementor-widget elementor-widget-text-editor\" data-id=\"32573a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Er zijn twee methoden om uit te vinden hoe lang een varint is: de lange manier (binair) en de gemakkelijke manier (hex nibble). Laten we beide bekijken.<\/p><p><strong>De lange weg: Binair gebruik<\/strong><\/p><ol><li style=\"list-style-type: none;\"><ol><li>Begin met de eerste byte van de varint.<\/li><li>Converteer de byte naar binair. Kijk naar het meest significante bit (het meest linkse bit).<ul><li>Als de bit 1 is, maakt de byte rechts deel uit van de varint.<\/li><li>Als de bit 0 is, heb je het einde bereikt.<\/li><\/ul><\/li><li>Herhaal dit proces voor elke byte totdat je een byte vindt met een MSB van 0.<\/li><\/ol><\/li><\/ol><p><strong>Voorbeeld:<\/strong><\/p><ul><li>Byte: <code>0xC2<\/code> \u2192 Binair: 11000010 \u2192 MSB: 1 \u2192 Doorgaan.<\/li><li>Byte: <code>0x7F<\/code> \u2192 Binair: 01111111 \u2192 MSB: 0 \u2192 Stop hier.<br \/><br \/><\/li><\/ul><p><strong>De gemakkelijke manier: De linker knobbel gebruiken<\/strong><\/p><ol><li>Kijk naar de linker nibble (het eerste hexadecimale cijfer van de byte).<\/li><li>Als de linker nibble 8 of hoger is (8, 9, A, B, C, D, E of F), is de volgende byte onderdeel van de varint.<\/li><li>Als de linker nibble 7 of lager is (0 tot 7), heb je het einde van de varint bereikt.<br \/><br \/><\/li><\/ol><p><strong>Waarom dit werkt:<\/strong> Een linker nibble van 8 of meer betekent dat de MSB 1 is, terwijl een linker nibble van 7 of minder betekent dat de MSB 0 is.<\/p><p><strong>Voorbeeld:<\/strong><\/p><ul><li>Byte: <code>0xC2<\/code> \u2192 Linker nibble: C (groter dan 8) \u2192 Doorgaan.<\/li><li>Byte: <code>0x7F<\/code> \u2192 Linker nibble: 7 (minder dan 8) \u2192 Stop hier.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-e1dd116 e-flex e-con-boxed e-con e-parent\" data-id=\"e1dd116\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2820676 elementor-widget elementor-widget-image\" data-id=\"2820676\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"670\" height=\"387\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Varint_in_Hex_03.png\" class=\"attachment-large size-large wp-image-2940\" alt=\"SQLite VarInt in hex view 03 \u2014 forensic analysis of variable-length integer encoding\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Varint_in_Hex_03.png.webp 670w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Varint_in_Hex_03-300x173.png.webp 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Varint_in_Hex_03-600x347.png.webp 600w\" sizes=\"(max-width: 670px) 100vw, 670px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">De varint (rood omlijnd) identificeert de lengte van de berichtentabel<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-32888b9 elementor-widget elementor-widget-heading\" data-id=\"32888b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Vari\u00ebren in cellengtes begrijpen: een praktisch voorbeeld<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6c77a5d elementor-widget elementor-widget-text-editor\" data-id=\"6c77a5d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Varinten worden in SQLite gebruikt om de grootte van <strong>cellen<\/strong> op databasepagina's. Deze cellen kunnen van alles bevatten, van tabellen tot tabelrecords, en de eerste byte(s) van een cel vertellen ons hoe groot de cel is. Deze lengte-indicator is zelf een varint, die kan vari\u00ebren van 1 tot 9 bytes in lengte.<\/p><h4><strong>Voorbeeld uit de praktijk: WAL-bestand<\/strong><\/h4><p>In dit voorbeeld bevat de cel de <strong>berichten tabel<\/strong>. De eerste byte van de cel is <code>0x81<\/code>, die een varint van twee bytes aangeeft.<\/p><ul><li><strong>Indeling:<\/strong><ul><li>Byte 1: <code>0x81<\/code> \u2192 Binair: 10000001 \u2192 Markeerbit: 1 \u2192 Doorgaan.<\/li><li>Byte 2: <code>0x07<\/code> \u2192 Binair: 00000111 \u2192 Markeerbit: 0 \u2192 Stop.<\/li><\/ul><\/li><\/ul><h4><strong>Decod<\/strong><strong>de Varint<\/strong><\/h4><p>Nu moeten we de varint decoderen. Als we gewoon de waarde <code>0x8107<\/code> naar een geheel getal, zouden we per ongeluk een enorme 33.031 berekenen, wat duidelijk niet overeenkomt met de werkelijke grootte van de cel.<\/p><p><strong>Waarom?<\/strong><br \/>De markeerbits dragen niet bij aan de werkelijke waarde van de varint. Om de varint goed te decoderen, moeten we <strong>de markeerstiften verwijderen<\/strong> en interpreteer alleen de betekenisvolle delen van de binaire representatie. Dit is hoe het gedaan wordt:<\/p><ul><li><strong>Decodeer:<\/strong><ul><li>Verwijder de markeringsbits: 0000001 en 0000111.<\/li><li>Combineer de twee septetten: 00000000 10000111 \u2192 Decimaal: 135.<\/li><\/ul><\/li><li>De lengte van de cel is 135 bytes (exclusief de varint en ROWID).<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae9848d elementor-widget elementor-widget-video\" data-id=\"ae9848d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;youtube_url&quot;:&quot;https:\\\/\\\/www.youtube.com\\\/watch?v=5Gr4LtE-_iE&quot;,&quot;video_type&quot;:&quot;youtube&quot;,&quot;controls&quot;:&quot;yes&quot;}\" data-widget_type=\"video.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-wrapper elementor-open-inline\">\n\t\t\t<div class=\"elementor-video\"><\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7df1e43 e-flex e-con-boxed e-con e-parent\" data-id=\"7df1e43\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f2f28f2 elementor-cta--layout-image-above elementor-cta--skin-classic elementor-animated-content elementor-bg-transform elementor-bg-transform-zoom-in elementor-widget elementor-widget-call-to-action\" data-id=\"f2f28f2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"call-to-action.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<a class=\"elementor-cta\" href=\"https:\/\/elusivedata.io\/nl\/sqlite-forensics\/?v=efad7abb323e\">\n\t\t\t\t\t\t\t<div class=\"elementor-cta__content\">\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-cta__title elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tOnze SQLite Forensics training geeft je het stap-voor-stap proces voor het decoderen van varints, freelists en andere interne structuren, zodat je verder kunt werken dan de beperkingen van tools.\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__button-wrapper elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t<span class=\"elementor-cta__button elementor-button elementor-size-\">\n\t\t\t\t\t\tMeer informatie \u2192\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fa75970 elementor-widget elementor-widget-heading\" data-id=\"fa75970\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">De Varint-calculator gebruiken voor effici\u00ebntie<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52213a4 elementor-widget elementor-widget-text-editor\" data-id=\"52213a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>De <a href=\"https:\/\/elusivedata.io\/nl\/tools-varint-calculator\/?v=efad7abb323e\">Varint rekenmachine<\/a> vereenvoudigt dit proces. Voer de hexadecimale waarde in (bijvoorbeeld 8107) om de varint snel te decoderen. In het bovenstaande voorbeeld geeft de rekenmachine 135 terug, wat de lengte bevestigt.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-98af75a e-flex e-con-boxed e-con e-parent\" data-id=\"98af75a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-afaeca0 elementor-widget elementor-widget-image\" data-id=\"afaeca0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"402\" height=\"412\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Calculator_1.png\" class=\"attachment-large size-large wp-image-2951\" alt=\"Calculator for SQLite forensics \u2014 forensic hex value calculation and conversion tool\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Calculator_1.png.webp 402w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Calculator_1-293x300.png.webp 293w\" sizes=\"(max-width: 402px) 100vw, 402px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">De varint 0x8107 converteren naar decimaal 135<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f3ada8e e-flex e-con-boxed e-con e-parent\" data-id=\"f3ada8e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8882a6a elementor-widget elementor-widget-heading\" data-id=\"8882a6a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Varints in Record Headers decoderen<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-24e5c3b elementor-widget elementor-widget-text-editor\" data-id=\"24e5c3b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In SQLite gebruiken recordheaders varints om te defini\u00ebren:<\/p><ol><li><strong>Lengte:<\/strong> Hoeveel gegevens u moet lezen.<\/li><li><strong>Type:<\/strong> Hoe de gegevens te interpreteren (integer, string, BLOB, enz.).<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-93e73f3 e-flex e-con-boxed e-con e-parent\" data-id=\"93e73f3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e42e020 elementor-widget elementor-widget-image\" data-id=\"e42e020\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"670\" height=\"387\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/record-header-string-length-varint.png\" class=\"attachment-large size-large wp-image-2955\" alt=\"SQLite record header string length VarInt \u2014 forensic analysis of text field encoding\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/record-header-string-length-varint.png.webp 670w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/record-header-string-length-varint-300x173.png.webp 300w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/record-header-string-length-varint-600x347.png.webp 600w\" sizes=\"(max-width: 670px) 100vw, 670px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Varint 0x25 in deze recordkop geeft de lengte van de string in de payload aan<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2c705b3 e-flex e-con-boxed e-con e-parent\" data-id=\"2c705b3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2407d45 elementor-widget elementor-widget-text-editor\" data-id=\"2407d45\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><strong>Voorbeeld: Lengte van een string<\/strong><\/h4>\nLaten we een varint in een recordkop decoderen:\n<ul>\n \t<li><strong>Varint:<\/strong> <code>0x25<\/code>\n<ul>\n \t<li>Linker nibble: 2 (minder dan 8) \u2192 Single-byte varint.<\/li>\n \t<li>Decimaal: 37.<\/li>\n<\/ul>\n<\/li>\n \t<li><strong>Lading:<\/strong> Stringlengte = 12 bytes (+97444455667).<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c99b93d e-flex e-con-boxed e-con e-parent\" data-id=\"c99b93d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f8fbf4b elementor-widget elementor-widget-image\" data-id=\"f8fbf4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t<figure class=\"wp-caption\">\n\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"295\" height=\"300\" src=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38-295x300.png\" class=\"attachment-medium size-medium wp-image-8526\" alt=\"SQLite VarInt Calculator tool \u2014 decode variable-length integers in forensic analysis\" srcset=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38-295x300.png.webp 295w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38-768x781.png.webp 768w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38-12x12.png.webp 12w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38-600x610.png.webp 600w, https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/Skarmavbild-2025-06-04-kl.-16.33.38.png.webp 812w\" sizes=\"(max-width: 295px) 100vw, 295px\" \/>\t\t\t\t\t\t\t\t\t\t\t<figcaption class=\"widget-image-caption wp-caption-text\">Varint-calculator converteert varints naar strings en BLOB-lengtes<\/figcaption>\n\t\t\t\t\t\t\t\t\t\t<\/figure>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-7a6e38f e-flex e-con-boxed e-con e-parent\" data-id=\"7a6e38f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7ea4454 elementor-widget elementor-widget-heading\" data-id=\"7ea4454\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Afsluitende gedachten<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a55de6 elementor-widget elementor-widget-text-editor\" data-id=\"6a55de6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Het begrijpen en decoderen van varints is een belangrijke vaardigheid voor elke digitaal forensisch onderzoeker die met SQLite databases werkt. Deze compacte integers zijn de sleutel tot het interpreteren van databasestructuren, het bepalen van celgroottes en het effici\u00ebnt herstellen van gegevens.<\/p>\n<p>Met hulpmiddelen zoals de <a href=\"https:\/\/elusivedata.io\/nl\/tools-varint-calculator\/?v=efad7abb323e\">Varint Rekenmachine,<\/a> wordt het proces toegankelijker, waardoor forensische professionals zich kunnen richten op het blootleggen van de waarheid die verborgen zit in digitaal bewijs. Het beheersen van varints is meer dan een technische vaardigheid, het is een essenti\u00eble vaardigheid die de uitkomst van onderzoeken direct kan be\u00efnvloeden.<\/p>\n<p>Je kunt meer lezen en de <a href=\"https:\/\/elusivedata.io\/nl\/tools-varint-calculator\/?v=efad7abb323e\">Varint rekenmachine <\/a>hier:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b4cf2b5 elementor-widget elementor-widget-button\" data-id=\"b4cf2b5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/elusivedata.io\/nl\/tools-varint-calculator\/?v=efad7abb323e\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Download VarInt rekenmachine<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b6082e2 elementor-widget elementor-widget-heading\" data-id=\"b6082e2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Misschien ben je ook ge\u00efnteresseerd in<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-62b1289 elementor-widget elementor-widget-video\" data-id=\"62b1289\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;youtube_url&quot;:&quot;https:\\\/\\\/www.youtube.com\\\/watch?v=QFn63mQ5_gI&quot;,&quot;video_type&quot;:&quot;youtube&quot;,&quot;controls&quot;:&quot;yes&quot;}\" data-widget_type=\"video.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-wrapper elementor-open-inline\">\n\t\t\t<div class=\"elementor-video\"><\/div>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7413dc6 elementor-cta--layout-image-above elementor-cta--skin-classic elementor-animated-content elementor-bg-transform elementor-bg-transform-zoom-in elementor-widget elementor-widget-call-to-action\" data-id=\"7413dc6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"call-to-action.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<a class=\"elementor-cta\" href=\"https:\/\/elusivedata.io\/nl\/ed-sqlite-visualizer\/?v=efad7abb323e\">\n\t\t\t\t\t\t\t<div class=\"elementor-cta__content\">\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-cta__title elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tSQLite-visualisator. Een gloednieuwe manier om SQLite te verkennen.\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__description elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tMet de nieuwe ED SQLite Visualizer kunt u de interne aspecten van een database bekijken, verborgen records terugvinden en sneller dan ooit punten met elkaar verbinden, en dat allemaal visueel. Nu al in gebruik in onze volledige SQLite cursus en binnenkort beschikbaar voor iedereen. \t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__button-wrapper elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t<span class=\"elementor-cta__button elementor-button elementor-size-\">\n\t\t\t\t\t\tKijk wat er komen gaat \u2192\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Varints zijn de ruggengraat van SQLite's effici\u00ebnte gegevensopslag, het coderen van waarden in een compact formaat dat digitaal forensisch onderzoekers moeten decoderen om kritisch bewijs bloot te leggen. Deze blog gaat in op het decoderingsproces, voorbeelden uit de praktijk en tools zoals de Varint Calculator om forensische analyse te vereenvoudigen.<\/p>","protected":false},"author":1,"featured_media":2926,"comment_status":"open","ping_status":"open","sticky":false,"template":"elementor_theme","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[21],"tags":[],"class_list":["post-2925","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile-forensics"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.3 (Yoast SEO v27.3) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Decoding Varints: A Critical Skill in SQLite Forensics - Elusive Data<\/title>\n<meta name=\"description\" content=\"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/elusivedata.io\/nl\/decoding-varints-a-critical-skill-in-sqlite-forensics\/\" \/>\n<meta property=\"og:locale\" content=\"nl_NL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Decoding Varints: A Critical Skill in SQLite Forensics\" \/>\n<meta property=\"og:description\" content=\"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/elusivedata.io\/nl\/decoding-varints-a-critical-skill-in-sqlite-forensics\/\" \/>\n<meta property=\"og:site_name\" content=\"Elusive Data\" \/>\n<meta property=\"article:published_time\" content=\"2025-01-08T10:37:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-08-14T19:31:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1456\" \/>\n\t<meta property=\"og:image:height\" content=\"816\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"James Eichbaum\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Geschreven door\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Eichbaum\" \/>\n\t<meta name=\"twitter:label2\" content=\"Geschatte leestijd\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/\"},\"author\":{\"name\":\"James Eichbaum\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\"},\"headline\":\"Decoding Varints: A Critical Skill in SQLite Forensics\",\"datePublished\":\"2025-01-08T10:37:11+00:00\",\"dateModified\":\"2025-08-14T19:31:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/\"},\"wordCount\":1370,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/VarInt_Post.png\",\"articleSection\":[\"Mobile Forensics\"],\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/\",\"name\":\"Decoding Varints: A Critical Skill in SQLite Forensics - Elusive Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/VarInt_Post.png\",\"datePublished\":\"2025-01-08T10:37:11+00:00\",\"dateModified\":\"2025-08-14T19:31:30+00:00\",\"description\":\"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#breadcrumb\"},\"inLanguage\":\"nl-NL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#primaryimage\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/VarInt_Post.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2025\\\/01\\\/VarInt_Post.png\",\"width\":1456,\"height\":816,\"caption\":\"SQLite VarInt blog post diagram \u2014 forensic explanation of variable-length integer format\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/decoding-varints-a-critical-skill-in-sqlite-forensics\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/elusivedata.io\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Decoding Varints: A Critical Skill in SQLite Forensics\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#website\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"name\":\"ElusiveData\",\"description\":\"Excellence in Digital Forensics Training and Consulting\",\"publisher\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/elusivedata.io\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"nl-NL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#organization\",\"name\":\"ElusiveData\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/Asset-3_2x-scaled.png\",\"width\":2560,\"height\":370,\"caption\":\"ElusiveData\"},\"image\":{\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@elusivedata\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/#\\\/schema\\\/person\\\/2c00b8313d6aef321fd69bf82e2aa436\",\"name\":\"James Eichbaum\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"nl-NL\",\"@id\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"url\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"contentUrl\":\"https:\\\/\\\/elusivedata.io\\\/wp-content\\\/plugins\\\/ld-dashboard\\\/public\\\/img\\\/img_avatar.png\",\"caption\":\"James Eichbaum\"},\"sameAs\":[\"http:\\\/\\\/elusivedata.io\"],\"url\":\"https:\\\/\\\/elusivedata.io\\\/nl\\\/author\\\/eichbaumjamesgmail-com\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Varints decoderen: Een cruciale vaardigheid in SQLite Forensics - Ongrijpbare gegevens","description":"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/elusivedata.io\/nl\/decoding-varints-a-critical-skill-in-sqlite-forensics\/","og_locale":"nl_NL","og_type":"article","og_title":"Decoding Varints: A Critical Skill in SQLite Forensics","og_description":"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.","og_url":"https:\/\/elusivedata.io\/nl\/decoding-varints-a-critical-skill-in-sqlite-forensics\/","og_site_name":"Elusive Data","article_published_time":"2025-01-08T10:37:11+00:00","article_modified_time":"2025-08-14T19:31:30+00:00","og_image":[{"width":1456,"height":816,"url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png","type":"image\/png"}],"author":"James Eichbaum","twitter_card":"summary_large_image","twitter_misc":{"Geschreven door":"James Eichbaum","Geschatte leestijd":"7 minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#article","isPartOf":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/"},"author":{"name":"James Eichbaum","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436"},"headline":"Decoding Varints: A Critical Skill in SQLite Forensics","datePublished":"2025-01-08T10:37:11+00:00","dateModified":"2025-08-14T19:31:30+00:00","mainEntityOfPage":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/"},"wordCount":1370,"commentCount":0,"publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"image":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png","articleSection":["Mobile Forensics"],"inLanguage":"nl-NL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/","url":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/","name":"Varints decoderen: Een cruciale vaardigheid in SQLite Forensics - Ongrijpbare gegevens","isPartOf":{"@id":"https:\/\/elusivedata.io\/#website"},"primaryImageOfPage":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#primaryimage"},"image":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#primaryimage"},"thumbnailUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png","datePublished":"2025-01-08T10:37:11+00:00","dateModified":"2025-08-14T19:31:30+00:00","description":"Decoding variable-length integers (Varints) is a critical skill in SQLite forensics. Learn how Varints work, where they appear in mobile app databases, and how to decode them manually.","breadcrumb":{"@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#breadcrumb"},"inLanguage":"nl-NL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/"]}]},{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#primaryimage","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2025\/01\/VarInt_Post.png","width":1456,"height":816,"caption":"SQLite VarInt blog post diagram \u2014 forensic explanation of variable-length integer format"},{"@type":"BreadcrumbList","@id":"https:\/\/elusivedata.io\/decoding-varints-a-critical-skill-in-sqlite-forensics\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/elusivedata.io\/"},{"@type":"ListItem","position":2,"name":"Decoding Varints: A Critical Skill in SQLite Forensics"}]},{"@type":"WebSite","@id":"https:\/\/elusivedata.io\/#website","url":"https:\/\/elusivedata.io\/","name":"ElusiveData","description":"Uitmuntendheid in digitale forensische training en advies","publisher":{"@id":"https:\/\/elusivedata.io\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/elusivedata.io\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"nl-NL"},{"@type":"Organization","@id":"https:\/\/elusivedata.io\/#organization","name":"ElusiveData","url":"https:\/\/elusivedata.io\/","logo":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/","url":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/uploads\/2024\/11\/Asset-3_2x-scaled.png","width":2560,"height":370,"caption":"ElusiveData"},"image":{"@id":"https:\/\/elusivedata.io\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.youtube.com\/@elusivedata"]},{"@type":"Person","@id":"https:\/\/elusivedata.io\/#\/schema\/person\/2c00b8313d6aef321fd69bf82e2aa436","name":"James Eichbaum","image":{"@type":"ImageObject","inLanguage":"nl-NL","@id":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","url":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","contentUrl":"https:\/\/elusivedata.io\/wp-content\/plugins\/ld-dashboard\/public\/img\/img_avatar.png","caption":"James Eichbaum"},"sameAs":["http:\/\/elusivedata.io"],"url":"https:\/\/elusivedata.io\/nl\/author\/eichbaumjamesgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/posts\/2925","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/comments?post=2925"}],"version-history":[{"count":73,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/posts\/2925\/revisions"}],"predecessor-version":[{"id":13215,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/posts\/2925\/revisions\/13215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/media\/2926"}],"wp:attachment":[{"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/media?parent=2925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/categories?post=2925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/elusivedata.io\/nl\/wp-json\/wp\/v2\/tags?post=2925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}