Advanced SQLite Database Exploitation (Live Remote Training – Dec 2022)
3-day Advanced Course – Live Remote
What is Live Remote Synchronous Training?
Remote Synchronous Training (RST) allows the attendee to participate in a structured training courses remotely, in the comfort of your own office. It eliminates travel costs and provides a fully interactive environment, just like being in the classroom! RST delivery is specifically designed to simulate a live learning environment. Students have two-way communication with the instructor as well as the other students in the class using a typical hardware setup from their remote location. Instructors can monitor and interact with all students at the same time. When needed, instructors can assist students by physically interacting with his/her assigned machine in the Spyder Forensics remote classroom.
Why choose a Remote class?
Content is delivered exactly the same as in our live classes · Full interaction with the trainer and other course attendees · No travel costs and enjoy the class at your preferred location · Receive the same courseware as an in-person class, i.e. page color printed student manual for post class reference, USB with datasets and student files · Use of unique datasets developed by Spyder Forensics covering all artifacts covered in this class and others in our curriculum · Post class access the Spyder Forensics Academy (LMS) for supplementary courseware and online electronic version of the training manual
What you will need:
A computer (Windows or Apple) connected to the internet allowing access to GoToTraining™ for instructor delivery and Splashtop Streamer to interact with the remote classroom PC · A microphone to interact via voice with the class (not required as Chat window is always available) · Speakers to hear the class being delivered · Preferred 2 monitors to open multiple windows (GoToTraining and Splashtop windows)
What you will receive:
Printed course manual · USB containing course files · Access to the Spyder Forensics Academy · Course certificate
SQLite is a relational database management system which is the most popular format for application developers due to its standalone functionality and ease of setup, management and low resource usage. Most mobile applications have built in SQLite databases to store user data, along with the main web browsers that we use daily. With the release of Windows 10 we have also seen Microsoft adopt SQLite to store data for applications such as TimeLine, the Photo App and Microsoft OneDrive. With this widespread popularity it has become more important that examiners understand the structure of this database format and how to extract and report on information stored within the tables, that our forensic tools may not support
The Spyder Forensics SQLite Forensics Advanced Exploitation class is designed for examiners who wish to gain a deep understanding of SQLite databases, Journal files, database schemas and SQLite scripting techniques.
This course will give participants an understanding of SQLite, how data is stored and the skills necessary to create queries to extract, interpret and present information in a meaningful manner. This includes translating dates and times and querying information stored in multiple tables to create more robust reports. Analysis includes a deep dive into SQLite pages at the Hex level where you will explore active and deleted records, going beyond simple SQLite analysis.
Students will use a variety of open source and leading forensic applications to examine key artifacts through multiple hands-on labs and student practicals.