Windows.db Forensics: SQLite, WAL and Gather Database
Windows 11 search index forensics: how Windows.db, Windows.db-wal and Windows-gather.db fit together, what the WAL reveals, and how not to destroy it.
Posts tagged: #sqlite
Windows.edb vs Windows.db: Windows 10 vs 11 Search Index
How the Windows Search index moved from the ESE Windows.edb of Windows 10 to the SQLite Windows.db of Windows 11: tables, layout, WAL and DFIR impact.