The Forensic Scooter

The Forensic Scooter

This blog was started by Scott Koenig as a place to post and manage some of his digital forensic research.

This is a personal blog. Any views or opinions represented in this blog are personal and belong solely to the blog owner and do not represent those of people, institutions, or organizations that the owner may or may not be associated with in professional or personal capacity, unless explicitly stated.

Additional resources can be found on his GitHub.

Latest from the Blog

Photos.Sqlite Queries – Update

I would like to start off by saying thank you to everyone who has reached out about the Photos.sqlite queries I previously posted. After chatting with some people who have used the queries, it was suggested that I update the queries to include the following: Restructuring the query output Renaming and clarifying the column namesContinue reading “Photos.Sqlite Queries – Update”

Photos.Sqlite Queries

Hello everyone! Back in August 2020, I wrote a blog “Using Photos.Sqlite to show the relationships between photos and the application they were created with?” which was posted on Heather Mahaliks’ blog, The writeup was eventually sent to DFIR Review ( and published on their website. This is a follow-up to the aforementioned blogContinue reading “Photos.Sqlite Queries”

Get new content delivered directly to your inbox.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s