Read-only SQLite forensic toolkit: carve deleted records (freelist/in-page/dropped-table/WAL/journal), read index b-trees & WITHOUT ROWID tables, WAL version history, anti-forensic + encryption-scheme diagnostics, BLOB typing/SHA-256/decode, CASE/UCO export. Panic-free, forbid-unsafe, validated vs undark/fqlite. CLI + Rust libs + Python.
rust sqlite incident-response sqlcipher forensics dfir python-bindings digital-forensics btree wal anti-forensics data-recovery carving pyo3 case-uco sqlite-forensics deleted-record-recovery blob-recovery without-rowid index-btree
-
Updated
Jul 20, 2026 - Rust