Last updated
Read-only SQLite forensic CLI — carve deleted records, grade anomalies
$ winget install --id SecurityRonin.sqlite4n6 --exact --version 0.1.0Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
sqlite4n6 uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i sqlite4n6-0.1.0-x86_64-pc-windows-msvc.msi /quiet /norestart
For Intune admins
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
sqlite4n6 is a read-only SQLite forensic CLI. It carves deleted records out of
a database's free (unallocated) space — freelist pages, in-page free blocks,
dropped-table pages, and an uncheckpointed WAL overlay — recovering rows a live
query cannot, and grades forensically-notable anomalies into severity-ranked
findings. It opens the evidence file read-only and never writes the file or its
sidecars.
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x64 | MSI WiX | machine | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
No known CVEs for sqlite4n6.
Coverage is best-effort and depends on a winget package mapping to an NVD CPE entry. Absence here is not a guarantee of safety.
More from SecurityRonin or browse carving, cli, data-recovery.