SQLite Recovery Benchmark: harness, test data and results for eight forensic tools
Description
Benchmark harness, test databases, answer keys and raw results of a comparison of eight SQLite recovery tools (FQLite, sqlite4n6, DC3 SQLite Dissect, bring2lite, SQLite GUI Analyzer, NFI xsqlite, sqlite_extract, SQLite .recover) on the SQLite Forensic Corpus (categories 0A-0E and the anti-forensic categories 11-19) and three false-positive scenarios after Lee et al. (2025).
Metrics: recall and precision of deleted-record recovery, recovery of live data in manipulated databases, false positives after B-tree rebalancing, drop-and-recreate and WAL with secure_delete, and robustness (crashes, time-outs, memory-limit violations). Each tool is run through an adapter that converts its output into a common format; all runs are limited to 180 s and 4 GB. The record contains the harness (scripts and adapters), the corpus databases, the ground-truth files, the normalised output and logs of every run, and the aggregated report. See README.md for contents, tool versions and reproduction steps.
Companion data set to the paper 'Recovering Deleted and Manipulated Records from SQLite Databases: A Reproducible Benchmark of Eight Forensic Tools'. Licences: benchmark code Apache-2.0, results and answer keys CC BY 4.0, SQLite Forensic Corpus databases public domain (CC0), see LICENSE-DATA.md.
Files
harness-and-data.zip
Files
(6.7 MB)
| Name | Size | |
|---|---|---|
|
md5:4b5541044a589b952c94a1adc443e530
|
599 Bytes | Download |
|
md5:e98972601f1e3c9a2fd5d463f9da2842
|
2.5 MB | Preview Download |
|
md5:6e6ee1f40634a5eb022fe4ab7994f978
|
11.3 kB | Download |
|
md5:7b9400af671e6caf5160bfdbb8ee99dd
|
696 Bytes | Preview Download |
|
md5:c0deeb9f4244be358a6fa49653220bf1
|
244.9 kB | Preview Download |
|
md5:854290138ec158a1454d510f8f626a9d
|
5.4 kB | Preview Download |
|
md5:2aab68dabd7ee9a475990e53f4b28c6b
|
3.7 MB | Preview Download |
|
md5:a65abe7fa18b0d432b1598ae23dcca49
|
185.0 kB | Download |
Additional details
Related works
- Is derived from
- Dataset: https://digitalcorpora.org/corpora/sql/sqlite-forensic-corpus/ (URL)
- Is supplement to
- Software: https://github.com/pawlaszczyk/fqlite (URL)
Software
- Programming language
- Python