Elusive Data digital forensics training — certified courses in SQLite forensics, Python for mobile forensics, and mobile device forensics

Visualizador de SQLite

Recover more evidence than any traditional workflow​

Visualize, decode, recover, and validate. All in one platform.
Agendar uma demonstracao
Download Brochure

SQLite Visualizer 1.2 introduces Geospatial Route Playback

Review latitude/longitude records on an interactive map, step through route points, and replay movement data directly from SQLite tables and saved views.
Contact Sales
sqlite visualizer

Finally. An all-in-one forensic SQLite platform that reveals the full story inside app data.

See SQLite evidence clearly. From records to raw pages.

SQLite Visualizer brings together database browsing, SQL analysis, WAL inspection, deleted-record recovery, B-tree exploration, hex review, and reporting in one forensic workflow.

The tool is available in two software editions: Basic for professional SQLite forensic analysis, and Avançado for cases that also require LevelDB analysis.

01

Analyze the database

Browse tables, run SQL queries, inspect schemas and relationships, review records, and understand how app data is structured.

02

Recover deleted and historical data

Inspect WAL files, freelist pages, deleted records, page-level artifacts, and source attribution to understand where evidence came from.

03

Validate at page level

Use the B-Tree Visualizer, page view, hex inspection, and artifact context to verify findings before export or reporting.

Basic SQLite analysis, WAL inspection, deleted-record recovery, B-tree/page-level review, hex view, and reporting.
Avançado Everything in Basic, plus LevelDB Viewer for browser artifacts, Electron apps, and cloud-synced application data.
Contact Sales

Choose Your SQLite Visualizer Package

Start with professional SQLite analysis, add LevelDB capabilities for advanced app evidence, or go deeper with certified training.
Choose Your Package
Software license

Basic

Professional SQLite forensics

Software only

€1,095 USD $1,300 · CAD $1,775

12-month license
Cloud or dongle

  • SQLite forensic analysis workspace
  • WAL reconstruction & state analysis
  • Deleted data recovery
  • Schema & relationship visualization
  • Page-level & hex inspection
  • Source attribution & reporting
  • LevelDB Viewer
  • Browser, Electron & cloud-synced app artifacts
  • On-demand training included
  • Certificate + 24 CPE credits
Includes updates, support,
and onboarding session.
Contact Sales
Software license

Avançado

SQLite + LevelDB analysis

Software only

€1,450 USD $1,700 · CAD $2,325

12-month license
Cloud or dongle

  • SQLite forensic analysis workspace
  • WAL reconstruction & state analysis
  • Deleted data recovery
  • Schema & relationship visualization
  • Page-level & hex inspection
  • Source attribution & reporting
  • LevelDB Viewer
  • Browser, Electron & cloud-synced app artifacts
  • On-demand training included
  • Certificate + 24 CPE credits
Includes updates, support,
and onboarding session.
Contact Sales
Software + On-demand training

Premium

Advanced license + on-demand training

Advanced software + self-paced course

€1,950 USD $2,300 · CAD $3,125

Online learning platform
12-month Advanced license

  • Full on-demand training course
  • Self-paced online learning platform
  • SQLite Visualizer Advanced included
  • LevelDB Viewer included
  • Browser, Electron & cloud-synced app artifacts
  • Digital license key
  • Updates, support & onboarding
  • Certificate + 24 CPE credits
Best value for analysts who want
Advanced software and training.
Contact Sales
Other Training Options

On-Demand + Basic

Self-paced course with SQLite Visualizer Basic.

€1,490 USD $1,750 · CAD $2,400

Live Online + Advanced

Instructor-led group training for teams of 3+.

€2,290 Group quote available

Onsite + Advanced

In-person group training at your location or partner-hosted venue.

From €3,890 Full quote on request

Capacidades completas para examinadores SQLite

CORE CAPABILITIES
Visualizador de SQLite

Visual-First Understanding of App Data

The core of the platform is a visual canvas that displays every table, every relationship, every record count, and any custom views as virtual table cards. This delivers an immediate, clear understanding of how an application structures its data, helping examiners grasp the database at a glance.

Análise forense de SQLite

Complete Built-In Decoding Environment

SQLiteVisualizer includes integrated decoding for plists, protobufs, Base64, GZIP, JSON stitching, Markdown, GPS data, and timestamp formats, everything interpreted directly inside the platform with no exporting or external tools required.

Advanced SQLite Forensics course banner — in-depth digital forensics training

Advanced Deleted Data Recovery

SQLiteVisualizer provides a complete set of examiner-focused recovery tools that expose deleted, historical, and overwritten content across all SQLite storage layers. It recovers data from WAL frames with timeline views, extracts remnants from freelist pages, carves fragmented records from freeblocks, analyzes rollback-journal history, and reconstructs records with full forensic metadata for validation.

Visualizador de SQLite

SQLite-Specific Hex Analysis

SQLiteVisualizer includes a dedicated Hex Analysis Engine built specifically for SQLite forensics, offering automatic decoding of database structures, smart context-aware templates, smooth navigation across pages and frames, fast value and timestamp interpretation, and support for reconstructing fragmented records.

SQLite

Integrated SQL Querying + Visual JOIN Builder

SQLiteVisualizer streamlines SQL work with visual, intuitive tools, letting you build queries directly from the canvas, create context-aware JOINs with a single click, save results as reusable virtual tables, and keep everything organized in a structured, searchable query library.

Análise forense de SQLite

Professional Reporting Environment

SQLiteVisualizer generates clear, defensible reports for any case, with flexible evidence and table summaries, interactive HTML output, automatic inclusion of case metadata and hash information, secure ZIP packaging options, and fully customizable report sections to match your agency’s requirements.

ADVANCED CAPABILITIES

LevelDB Viewer

Analyze LevelDB stores used by Chromium-based browsers, Electron applications, messaging tools, and cloud-synced apps. Inspect keys, values, sequence data, overwritten artifacts, and encoded application content in a forensic workflow built for rapid review and validation.

Browser & Electron App Artifacts

Go beyond traditional SQLite databases and examine application evidence stored in modern web-backed formats. Advanced helps investigators identify cached content, synchronized records, browser artifacts, and app data that may not appear in standard SQLite views.

Cross-Storage Evidence Review

Correlate SQLite records with LevelDB artifacts to understand how application data was created, cached, synchronized, modified, or removed across multiple storage layers. This gives examiners a clearer picture of activity in complex or partially parsed apps.

Built-In Forensic Safeguards & Smart Assistance in Any Language

SQLVisualizer

Case Management & Forensic Integrity

SQLiteVisualizer includes a full case-management workflow designed for forensic defensibility. It works in read-only mode, creates protected evidence copies, verifies hashes across multiple algorithms, and captures case metadata and custom fields. Your analysis state and history are preserved across sessions, ensuring every step of your work remains transparent, reliable, and fully repeatable.

Agendar uma demonstracao
Análise forense de SQLite

Built-In Forensic Chatbot. In Any Language.

SQLiteVisualizer includes a built-in forensic chatbot that you can use in any language, making guidance and SQL assistance accessible to every examiner. It helps you write complex queries, explains SQLite structures like WAL and freelists in simple terms, and supports your workflow without ever accessing evidence data, only the schema. A faster, clearer way to get help right inside the tool.

Agendar uma demonstracao

Utilizado todos os dias por investigadores em todo o mundo

Daniel K. Digital Forensics Examiner

I didn’t expect a SQLite tool to make this big a difference, but honestly, it’s shaved hours off my cases. The moment I open a database, I actually understand what I’m looking at. And the deleted data it uncovered… we would never have found that with our old workflow! It’s just made my job easier, plain and simple.

Linn P. Analista forense de telemóveis

What I appreciate most is that nothing feels hidden or confusing. I can follow how an app changes its data, notice unusual behavior, and review deleted records without struggling with the tool. It really feels like someone finally built a SQLite tool for how investigators actually work. It’s been extremely helpful.

Stefan Y. High-Tech Crime Unit Investigator

When I first used it during the course, it immediately made my workflow simpler. Everything I used to juggle between different tools was suddenly all in one place. No exporting, no jumping around. I’ve watched it develop over time, and it’s become something I rely on every day. It genuinely saves time and helps me find things I would have missed.

What SQLite Visualizer empowers you to do

✓
Understand app data instantly.

Gain immediate insight into how an application structures, links, and organizes its information the moment the database loads.

✓
See every table, relationship, and record count at once.

Get immediate clarity on how the app stores, links, and evolves its data.

✓
Recover more evidence than traditional tools reveal.

Extract deleted, historical, and fragmented records across WAL, freelist, journals, and freeblocks with full forensic context.

✓
Decode everything in one place.

Analyze complex formats without exporting files, switching tools, or losing your investigative flow.

✓
Automatically interpret complex data formats.

Interpret plists, protobufs, Base64, GZIP, JSON stitching, timestamps, and GPS data inside one unified forensic workspace.

✓
Validate findings with confidence.

Back every conclusion with transparent evidence sources, structured metadata, and documented origin for each recovered record.

✓
Review hex views, source metadata, and recovery details.

Documented recovery context for each record helps ensure conclusions hold up in reports, peer review, and testimony.

✓
Work in a single streamlined workflow.

Move from visual exploration to SQL, joins, custom views, and reporting without exporting data or switching between external tools.

✓
Produce clear, defensible reports.

Generate structured reports with filters, transformations, metadata, hashes, images, maps, and interactive elements — all guided and case-ready.

FAQ

ED SQLite Visualizer - Descrição geral
Why We Built It

Designed for the Questions Standard Views Don’t Answer

SQLite Visualizer was created from real casework and forensic training — not as another database viewer, but as a way to make application database evidence easier to understand, recover, validate, and explain.

What was deleted — and when did it happen?
Where did this record come from — live database, WAL, freelist, journal, or recovered data?
How do I explain this clearly in a report, review, or testimony?

The platform gives investigators a visual, structured workflow that keeps database structure, record history, deleted content, and source attribution in context.

What Makes It Different

One Visual Workflow for SQLite Evidence

SQLite Visualizer combines visual exploration, decoding, SQL analysis, low-level inspection, and deleted-data recovery in one forensic environment.

  • WAL Reconstruction & State Analysis Review WAL activity frame by frame and understand how records changed over time.
  • Schema & Relationship Visualization Explore large or undocumented databases through an interactive structural map.
  • Page-Level & Hex Interpretation Inspect pages, varints, overflow chains, freelists, and record headers without losing context.
  • Deleted Data Recovery Recover records from WAL files, freelist pages, rollback journals, and related SQLite structures.
  • Source Attribution & Reporting Support Trace recovered records back to their origin and support clear, defensible reporting.
Packaging
Available as software licenses and Premium training bundles.

Choose Basic for focused SQLite forensic analysis, Advanced for SQLite plus LevelDB analysis, or a Premium Package when certified SQLite training should be included.

ED SQLite Visualizer - Caraterísticas
No SQL Required

Built for Examiners, Not Just Developers

SQLite Visualizer helps forensic examiners review database evidence without needing to write SQL queries or manually navigate disconnected hex dumps.

  • Visual forensic workflow Explore database structures, record origins, WAL activity, and deleted data in context.
  • Low-level detail when needed Advanced users can still inspect pages, headers, varints, overflow chains, and hex-level structures.
  • Designed for interpretation The goal is not only to view rows, but to understand where evidence came from and how it changed.
Casework Ready

Designed for Real Forensic Workflows

SQLite Visualizer is built to support investigative review, validation, recovery, reporting, and testimony preparation.

  • Work on forensic copies Review copied database material using a non-destructive analysis workflow.
  • Trace source attribution Identify whether records originate from the live database, WAL, freelist, journal, or recovered structures.
  • Validate tool output Support deeper review when commercial forensic tools only show parsed results.
  • Support explainable reporting Preserve context around recovered records, state changes, and artifact origin.
Basic License

Professional SQLite Forensic Analysis

Basic includes the core forensic workflow for investigators working with SQLite application databases.

  • SQLite forensic analysis workspace Review database content, structure, and evidence context in one environment.
  • WAL reconstruction & state analysis Understand how records changed across write-ahead log activity.
  • Deleted data recovery Recover evidence from WAL files, freelist pages, rollback journals, and related SQLite structures.
  • Schema & relationship visualization Explore large or undocumented databases through visual relationship mapping.
  • Page-level & hex inspection Inspect lower-level SQLite structures without losing investigative context.
Advanced License

SQLite + LevelDB Application Analysis

Advanced includes the SQLite Visualizer workflow and adds LevelDB Viewer for broader application evidence review.

  • Everything needed for SQLite analysis Includes the same SQLite forensic capabilities used in the Basic license.
  • LevelDB Viewer included Analyze LevelDB stores used by browsers, Electron apps, mobile apps, and cloud-synced systems.
  • Browser & Electron app artifacts Review cached content, synchronized records, key/value data, overwritten artifacts, and encoded application content.
  • Cross-storage evidence review Understand how evidence may exist across SQLite databases and LevelDB stores in the same application.
Licenses & Premium Packages
Choose software only, or include certified training.

SQLite Visualizer is available as Basic or Advanced software licenses. Premium Packages combine software with certified SQLite Forensics training, hands-on labs, CTF-style challenges, certificate of completion, and 24 CPE credits.

ED SQLite Visualizer - Acesso
Available Now

SQLite Visualizer Is Available for Licensing

SQLite Visualizer is available as Basic and Advanced software licenses, with Premium Packages available when certified SQLite Forensics training should be included.

12-month license options

Choose software-only licensing or a software + training bundle. Cloud or dongle licensing options are available depending on your operational needs.

  • Basic Professional SQLite forensic analysis for application database investigations.
  • Avançado SQLite analysis plus LevelDB Viewer for browser, Electron, mobile app, and cloud-synced artifacts.
  • Premium Packages Software + certified training bundles with labs, CTF-style challenges, certificate, and 24 CPE credits.

Need help choosing the right license or package?

Contact Sales
Live Demo

Request a Walkthrough for Your Team

We can show how SQLite Visualizer fits real forensic workflows, including database review, WAL analysis, deleted-data recovery, reporting support, and Advanced LevelDB analysis.

See the differences clearly

A demo can help your team compare Basic, Advanced, and Premium Package options before deciding which setup fits your work.

  • Workflow overview See how visual exploration, decoding, SQL analysis, and recovery work together.
  • Package guidance Understand whether you need SQLite only, SQLite + LevelDB, or software with certified training.
  • Team and partner options Discuss live online, onsite, and group training needs when relevant.

Want a guided demo or package recommendation?

Request a Demo
Sales contact: For pricing, licensing, demos, or package recommendations, contact sales@elusivedata.io.
ED SQLite Visualizer - Utilização
Who It Is For

Built for Investigators Working With Application Database Evidence

SQLite Visualizer is designed for professionals who need to understand, recover, validate, and explain evidence stored in SQLite databases — and, with Advanced, related LevelDB application artifacts.

Digital Forensic Examiners

Analyze SQLite evidence from mobile apps, desktop applications, browser data, and forensic extractions.

Law Enforcement Investigators

Review app data, deleted records, timelines, and artifact origins in a clearer investigative workflow.

Forensic Lab Teams

Support repeatable review, validation, documentation, and internal quality control workflows.

Legal & Expert Witness Teams

Prepare clearer explanations of where records came from, how they changed, and how evidence was recovered.

DFIR & Cybersecurity Teams

Investigate application databases, local storage, browser artifacts, and records relevant to incidents.

Students & Training Programs

Learn how SQLite evidence works through visual exploration, labs, CTF-style challenges, and structured review.

Useful When Standard Tool Output Is Not Enough

SQLite Visualizer helps users move beyond parsed rows and understand the underlying structures that explain what happened inside the database.

  • Validate parsed results Confirm whether commercial tools interpreted database records correctly.
  • Recover hidden or deleted evidence Examine WAL, freelist, rollback journal, and page-level structures.
  • Explain artifact origin Support clear reporting by showing where data came from and how it changed.
  • Investigate unsupported apps Explore application databases even when automated parsers do not exist.
Basic is focused on professional SQLite forensic analysis. Avançado adds LevelDB Viewer for broader application artifact review. Premium Packages combine software with certified SQLite Forensics training.
ED SQLite Visualizer - Preços
Pricing & Licensing

Choose a Software License or a Premium Training Package

SQLite Visualizer is available as software-only licensing for Basic and Advanced users, or as Premium Packages that combine software with certified SQLite Forensics training.

Basic

SQLite Visualizer Basic

Professional SQLite forensic analysis for examiners working with application database evidence.

Avançado

SQLite Visualizer Advanced

SQLite forensic analysis plus LevelDB Viewer for browser, Electron, mobile app, and cloud-synced artifacts.

Premium

Software + Training Bundles

Premium Packages combine SQLite Visualizer with certified SQLite Forensics training in on-demand, live online, or onsite formats.

Licensing is Simple and Flexible

All software options are offered as 12-month licenses. Cloud or dongle licensing can be discussed depending on your operational needs, team structure, and deployment environment.

  • Software licenses Basic and Advanced are available as software-only options.
  • Premium Packages Add certified training, labs, CTF-style challenges, certificate of completion, and 24 CPE credits.
  • Team and partner options Group pricing, live online training, and onsite delivery can be quoted for teams.
  • Sales guidance Contact us if you want help choosing between Basic, Advanced, or a Premium Package.
Need pricing or help choosing the right package? Contact our sales team for current pricing, licensing options, demos, and team packages.
Contact Sales
Getting Started - ED SQLite Visualizer
Getting Started

Ready to See SQLite Visualizer in Action?

Choose a software license for your forensic workflow, or select a Premium Package if you want certified SQLite Forensics training included.

Book a Demo

See how SQLite Visualizer supports visual database review, WAL analysis, deleted-data recovery, source attribution, and Advanced LevelDB analysis.

Explore Certified Training

Join the Certified SQLite Forensics course to build practical SQLite recovery skills through labs, CTF-style challenges, and real-world forensic scenarios.

Book a Demo View Certified Training
SQLite Visualizer is available separately as Basic or Advanced software licenses. Premium Packages combine the software with certified SQLite Forensics training, hands-on labs, CTF-style challenges, certificate of completion, and 24 CPE credits.

You’re just a step away from seeing SQLite Visualizer in action.

Book a demo and see how SQLite Visualizer can support your investigations

Book a Demo

Explore SQLite Forensic Analysis Topics

Go deeper into the workflows behind SQLite Visualizer, including WAL analysis, deleted record recovery, and forensic SQLite examination.

SQLite WAL Viewer Review write-ahead log activity and understand recent database changes. Recover Deleted SQLite Records Learn how deleted data can remain in WAL files, freelist pages, and freeblocks. SQLite Forensic Analysis Tool See how forensic workflows differ from standard SQLite viewers.