This X-Tension is used to extract Binary Large Object (BLOB) data from Sqlite databases.
This is data, such as picture or movie files, which can difficult to carve out of database files due to the way the database file is structured.
The X-tension will create a child folder for each table within the database that contains a BLOB field.
The data will then be extracted into this folder, the name of the file is the SQLite BLOB field name combined with the Primary Key Field (or ROWID if no primary key).
All the extracted data will also be added to a report table so that it can be processed if required. This is a good idea when looking for picture files as they often start a few bytes in.
Category: X-Ways 3rd Party Tools
Category URL: http://www.dfir.training/component/mtree/by-developer/3rd-party?Itemid=