sqlite4n6

SecurityRonin·SecurityRonin.sqlite4n6

Read-only SQLite forensic CLI — carve deleted records, grade anomalies

sqlite4n6 is a read-only SQLite forensic CLI. It carves deleted records out of a database's free (unallocated) space — freelist pages, in-page free blocks, dropped-table pages, and an uncheckpointed WAL overlay — recovering rows a live query cannot, and grades forensically-notable anomalies into severity-ranked findings. It opens the evidence file read-only and never writes the file or its sidecars.

winget install --id SecurityRonin.sqlite4n6 --exact --source winget

Latest 0.1.0·June 18, 2026

Release Notes

Installer type: wix

ArchitectureScopeDownloadSHA256
x64Download3BFD608862C6305BF9401930ED9608CD50B34CBFC0DAD18484116E0AE6DE93A7

Details

Homepage
https://github.com/SecurityRonin/sqlite-forensic
License
Apache-2.0
Publisher
SecurityRonin
Support
https://github.com/SecurityRonin/sqlite-forensic/issues
Copyright
Copyright (c) SecurityRonin
Moniker
sqlite4n6

Tags

carvingclidata-recoverydeleted-recordsdfirforensicssqlitewal