sqlite4n6

SecurityRonin·SecurityRonin.sqlite4n6

Read-only SQLite forensic CLI — carve deleted records, grade anomalies

sqlite4n6 is a read-only SQLite forensic CLI. It carves deleted records out of a database's free (unallocated) space — freelist pages, in-page free blocks, dropped-table pages, and an uncheckpointed WAL overlay — recovering rows a live query cannot, and grades forensically-notable anomalies into severity-ranked findings. It opens the evidence file read-only and never writes the file or its sidecars.

winget install --id SecurityRonin.sqlite4n6 --exact --source winget

Latest 0.10.1·July 16, 2026

Release Notes

Full Changelog: v0.10.0...v0.10.1

Installer type: wix

x64C6C7C9EAAE2D27373D8C0CD9C76D8738DF54D169B8A7336E815FB99FD2FE33DC

Details

Homepage
https://github.com/SecurityRonin/sqlite-forensic
License
Apache-2.0
Publisher
SecurityRonin
Support
https://github.com/SecurityRonin/sqlite-forensic/issues
Copyright
Copyright (c) SecurityRonin
Moniker
sqlite4n6

Tags

carvingclidata-recoverydeleted-recordsdfirforensicssqlitewal

Older versions (2)

0.10.0
x64DD7FC17382407B9BE4A28A59591E411ED57B0697943BA2BC1410FC31EAB27B2A
0.1.0
x643BFD608862C6305BF9401930ED9608CD50B34CBFC0DAD18484116E0AE6DE93A7