From a36f3802ec96291a8c1f563ddb4fa3be235c01e8 Mon Sep 17 00:00:00 2001 From: Costas K <11378310+kacos2000@users.noreply.github.com> Date: Thu, 4 Jul 2019 13:40:59 +0300 Subject: [PATCH] IOS --- Photos_sqlite11.sql | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/Photos_sqlite11.sql b/Photos_sqlite11.sql index 060a39f..76128fb 100644 --- a/Photos_sqlite11.sql +++ b/Photos_sqlite11.sql @@ -1,4 +1,4 @@ --- IOS 11 - Camera Roll\Media\PhotoData\Photos.sqlite +-- IOS 11/12 - Camera Roll\Media\PhotoData\Photos.sqlite -- References: -- @@ -6,14 +6,21 @@ -- https://github.com/geiszla/iOSLib/wiki/ZADDITIONALASSETATTRIBUTES-contents -- https://forensenellanebbia.blogspot.com/2015/10/apple-ios-recently-deleted-images.html -- SIDECAR https://en.wikipedia.org/wiki/Sidecar_file - +-- +-- Live Photo is a video-picture hybrid file with both animated MOV and static JPG combined. +-- https://appletoolbox.com/live-photos-on-iphone-complete-guide/ +-- +-- OriginalFilename is the filename used when this was shared in another app +-- Filename is the IOS converted filename after the above image was saved on the device(iPhone) +-- -- Z_PK = Primary Key (unique identifier) for the entity, -- Z_ENT = is the entity ID (every entity of a particular type has the same entity ID) -- Z_OPT = number of times an entity has been changed -- +-- https://linuxsleuthing.blogspot.com/2013/05/ios6-photo-streams-recover-deleted.html +-- https://discussions.apple.com/thread/8184861 select -Z_PRIMARYKEY.Z_NAME as 'Type', case zgenericasset.ZSAVEDASSETTYPE when 0 then 'Saved from other source' when 2 then 'Photo Streams Data'