Downloads:
8
Downloads of v 1.0.0:
8
Last Update:
28 Apr 2024
Published Date:
28 Apr 2024
Package Maintainer(s):
Software Author(s):
- Eric Zimmerman
Tags:
digital forensics incident response dfir- Software Specific:
- Software Site
- Software Source
- Software License
- Software Docs
- Software Issues
- Package Specific:
- Package Source
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download
SQLECmd
(Ready for review)
- 1
- 2
- 3
1.0.0 | Updated: 28 Apr 2024
- Software Specific:
- Software Site
- Software Source
- Software License
- Software Docs
- Software Issues
- Package Specific:
- Package Source
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download
Downloads:
8
Downloads of v 1.0.0:
8
Published:
28 Apr 2024
Maintainer(s):
Software Author(s):
- Eric Zimmerman
SQLECmd 1.0.0
(Ready for review)
- 1
- 2
- 3
Some Checks Have Failed or Are Not Yet Complete
Not All Tests Have Passed
This version is in moderation and has not yet been approved. This means it doesn't show up under normal search.
- Until approved, you should consider this package version unsafe - it could do very bad things to your system (it probably doesn't but you have been warned, that's why we have moderation).
- This package version can change wildly over the course of moderation until it is approved. If you install it and it later has changes to this version, you will be out of sync with any changes that have been made to the package. Until approved, you should consider that this package version doesn't even exist.
- You cannot install this package under normal scenarios. See How to install package version under moderation for more information.
- There are also no guarantees that it will be approved.
There are versions of this package awaiting moderation (possibly just this one). See the Version History section below.
SQLECmd is a tool created by Eric Zimmerman used to parse SQLite databases. SQLite databases will only be parsed if a Map exists for that specific SQLite database.
SQLECmd Use Cases
Law Enforcement
For those in Law Enforcement, this tool is useful for parsing SQLite databases which often store common web browser artifacts. SQLECmd can provide as a validation tool to many commonly used forensic suites that parse browsing history, as well. The SQLite queries are available on GitHub and can be modified by the community if ever the database schema evolves enough to where current SQLite queries do not work any longer. Additionally, this tool can be used to parse mobile artifacts which can serve as a validation tool for common mobile forensic suites.
Private Sector
For those in the Private Sector, this tool is useful for parsing SQLite databases which often store common web browser artifacts.
From: https://github.com/EricZimmerman/SQLECmd/blob/master/LICENSE
LICENSE
MIT License
Copyright (c) 2021 Eric Zimmerman
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
md5: D671FA500829978F8FDEF6B8CD5402A7 | sha1: 267F89A23CF9F6FE946B1C339974701A618C0638 | sha256: 40A23C2BD6855753E5F39A7CB944CD2E13AECB70AE2C5B3DB840C959225454BE | sha512: 5A74B41C5F8002861CA25FCAA245AE4E3EE562B992D9BA741131C051CB500B9678CF0A667FE8EB6B469628FE02D2034BFF9A1DEFE8DF779E66CE648595D04C40
VERIFICATION
Verification is intended to assist the Chocolatey moderators and community
in verifying that this package's contents are trustworthy.
Download zip package:
URL: https://f001.backblazeb2.com/file/EricZimmermanTools/net6/SQLECmd.zip
Compare the SHA256 hash of the downloaded zip package with that of the embedded zip package:
SHA256: 40A23C2BD6855753E5F39A7CB944CD2E13AECB70AE2C5B3DB840C959225454BE
Log in or click on link to see number of positives.
- sqlecmd.1.0.0.nupkg (33d5bd34ce0e) - ## / 66
- SQLECmd.zip (40a23c2bd685) - ## / 65
- SQLECmd.dll (82014aa76c9f) - ## / 67
- SQLECmd.exe (8ee9fc3ae3ab) - ## / 72
In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).
Chocolatey Pro provides runtime protection from possible malware.
2021 Eric Zimmerman
-
- dotnet-6.0-runtime (≥ 6.0.1)
Ground Rules:
- This discussion is only about SQLECmd and the SQLECmd package. If you have feedback for Chocolatey, please contact the Google Group.
- This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
- The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
- Tell us what you love about the package or SQLECmd, or tell us what needs improvement.
- Share your experiences with the package, or extra configuration or gotchas that you've found.
- If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.
sustainablelobster (maintainer) on 28 Apr 2024 14:40:39 +00:00:
User 'sustainablelobster' (maintainer) submitted package.
sustainablelobster (maintainer) on 28 Apr 2024 14:59:58 +00:00:
User 'sustainablelobster' (maintainer) submitted package.
chocolatey-ops (reviewer) on 28 Apr 2024 15:34:33 +00:00:
sqlecmd has passed automated validation. It may have or may still fail other checks like testing (verification).
NOTE: No required changes that the validator checks have been flagged! It is appreciated if you fix other items, but only Requirements will hold up a package version from approval. A human review could still turn up issues a computer may not easily find.
Guidelines
Guidelines are strong suggestions that improve the quality of a package version. These are considered something to fix for next time to increase the quality of the package. Over time Guidelines can become Requirements. A package version can be approved without addressing Guideline comments but will reduce the quality of the package.
Notes
Notes typically flag things for both you and the reviewer to go over. Sometimes this is the use of things that may or may not be necessary given the constraints of what you are trying to do and/or are harder for automation to flag for other reasons. Items found in Notes might be Requirements depending on the context. A package version can be approved without addressing Note comments.
chocolatey-ops (reviewer) on 28 Apr 2024 16:02:09 +00:00:
sqlecmd has passed automated package testing (verification). The next step in the process is package scanning.
Please visit https://gist.github.com/choco-bot/fc153d91bd64e67401916190296418b3 for details.
This is an FYI only. There is no action you need to take.
chocolatey-ops (reviewer) on 28 Apr 2024 16:16:59 +00:00:
sqlecmd has been flagged as part of automated virus scanning.
Package virus scanning found that at least 1 file within, or downloaded by, the package has between 1 and 5 VirusTotal detections associated with it.
This is not enough detections to prevent the approval of this package version.