Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.
-
Updated
May 7, 2026 - Rust
Forensic extraction for WhatsApp, Signal, and Telegram — 8-layer SQLite recovery, anti-forensics detection, court-ready reports.
Read-only SQLite forensic toolkit: carve deleted records (freelist/in-page/dropped-table/WAL/rollback-journal), per-rowid WAL version history, anti-forensic + encryption-scheme diagnostics, BLOB typing/SHA-256/decode, and CASE/UCO export. Panic-free, forbid-unsafe, validated against undark/fqlite. CLI + Rust libs + Python.
Add a description, image, and links to the sqlite-forensics topic page so that developers can more easily learn about it.
To associate your repository with the sqlite-forensics topic, visit your repo's landing page and select "manage topics."