Difference between revisions of "Tsk loaddb"
From SleuthKitWiki
Apriestman (Talk | contribs) (Added links to newer schema versions) |
Apriestman (Talk | contribs) |
||
| Line 8: | Line 8: | ||
* [[SQLite Database v3 Schema]] | * [[SQLite Database v3 Schema]] | ||
* [[SQLite Database v6 Schema]] | * [[SQLite Database v6 Schema]] | ||
| + | * [[Database v7.2 Schema]] | ||
[http://www.sleuthkit.org/sleuthkit/man/tsk_loaddb.html Automatically Updated man Page] | [http://www.sleuthkit.org/sleuthkit/man/tsk_loaddb.html Automatically Updated man Page] | ||
Latest revision as of 10:34, 21 November 2017
Back to Help Documents
tsk_loaddb will save the image, volume, and file metadata to a SQLite database. The database can be used by other programs so that they can access information about the image without using all of the TSK methods.
There are multiple versions of the schema.
- Version 1 was released with TSK 3.2. Its schema was never officially documented, but you can figure it out by looking at the CREATE statements in tsk3/auto/auto_db.cpp.
- SQLite Database v2 Schema
- SQLite Database v3 Schema
- SQLite Database v6 Schema
- Database v7.2 Schema
