mirror of https://github.com/kacos2000/Queries
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
fca312fb4d
|
5 years ago | |
|---|---|---|
| Accounts3_sqlite.sql | 5 years ago | |
| AddressBookImages_sqlite.sql | 5 years ago | |
| AddressBook_sqlite.sql | 5 years ago | |
| Calls.xml | 5 years ago | |
| GDrive_cloudgraph.sql | 5 years ago | |
| GDrive_snapshot.sql | 5 years ago | |
| GoogleDrive.xml | 5 years ago | |
| LICENSE | 5 years ago | |
| Opera_History.sql | ||
| Photos_sqlite.sql | 5 years ago | |
| Photos_sqlite3.sql | 5 years ago | |
| README.md | 5 years ago | |
| TeraCopy_Windows.sql | ||
| TeraCopy_Windows.xml | ||
| _config.yml | ||
| cache_db.csv | ||
| cache_db.ps1 | ||
| calendar_extras.sql | 5 years ago | |
| calendar_sqlitedb.sql | 5 years ago | |
| callhistory_storedata.sql | 5 years ago | |
| calllog_db.sql | 5 years ago | |
| chrome_favicons.sql | ||
| contacts2.sql | 5 years ago | |
| contacts2calls.sql | 5 years ago | |
| firefox_contentprefs.sql | ||
| firefox_favicons.sql | ||
| firefox_formhistory.sql | ||
| firefox_places.sql | ||
| healthdb.sql | 5 years ago | |
| healthdb_secure.sql | 5 years ago | |
| iPhotoLitedb.sql | 5 years ago | |
| notes_sqlite.sql | 5 years ago | |
| recents.sql | 5 years ago | |
| skype_cache_db.sql | ||
| skype_main_db.sql | ||
| sms_db.sql | 5 years ago | |
README.md
SQLite queries
-
-
Browsers
-
Mozilla Firefox 61+:
-
Opera 54+
- Opera_History.sql
- Chrome_favicons.sql (works with Opera as well)
-
Chrome 67+
- Opera_History.sql (works with Chrome as well)
- Chrome_favicons.sql
-
-
Skype (version 7.21 & 7.41 dBs)
-
skype_main.sql
Query Skype's (Classic) main.db for chats & file transfers. -
skype_cache_db
Query Skype's (Classic) both cache_db.db databases found at AppData\Roaming\UserProfile\media_messaging\- 'emo_cache_v2\asyncdb\cache_db' (cached Emoticons etc) &
- 'media_cache_v3\asyncdb\cache_db' (Cached Sent & Received images) folders.
- 'emo_cache_v2\asyncdb\cache_db' (cached Emoticons etc) &
-
PowerShell script/sqlite query so that you can view the Hex Blob output
-
-
Google Drive
- Query Google Drive's snapshot.db found at the '\AppData\Local\Google\Drive\user@' folder .
- Query Google Drive's cloud_graph.db found at the '\AppData\Local\Google\Drive\user@\cloud_graph' folder
- Query Google Drive's snapshot.db found at the '\AppData\Local\Google\Drive\user@' folder .
-
Android
-
IOS
- IOS 'Accounts3.sqlite' (Accounts)
- IOS 'calendar.sqlitedb' (Calendar)
- IOS 'Extras.db' (Calendar)
- IOS 'AddressBook.sqlitedb' (AddressBook)
- IOS 'AddressBookImages.sqlitedb' (AddressBook Images)
- IOS 7+ 'Photos.sqlite'
- IOS 3 'Photos.sqlite'
- IOS 'iPhotoLite.db'
- IOS 'healthdb.sqlite'
- IOS 'healthdb_secure.sqlite'
- IOS 'notes.sqlite'
- IOS '\Home\Library\Mail\Recents' (Mail)
- IOS 'sms.db' (SMS/iMessages)
- IOS 'callhistory.storedata' (Call history)
- IOS 'Accounts3.sqlite' (Accounts)
-