This X-Tension is used to extract Binary Large Object (BLOB) data from Sqlite databases.
This is data, such as picture or movie files, which can difficult to carve out of database files due to the way the database file is structured.
The X-tension will create a child folder for each table within the database that contains a BLOB field.
The data will then be extracted into this folder, the name of the file is the SQLite BLOB field name combined with the Primary Key Field (or ROWID if no primary key).
All the extracted data will also be added to a report table so that it can be processed if required. This is a good idea when looking for picture files as they often start a few bytes in.

Suggested Usage:
After "Verify File Signatures" has been applied to all files, filter out Sqlite databases.
Run X-Tension against filtered files only.
Once done, filter out all files in report table "Extracted Blob Data".
Run File signature, Hash Files and Uncover Embedded Data against filtered files.
The "Uncover embedded data" option shoould include option to "File Header Signature search in all files not processed above". Untick above option for "Uncover embedded data in various file types"
Select picture files to carve for (complete byte search)

It currently ignores all BLOB data less that 32 bytes in length.

Currently on x64 bit version availible. All bugs/requests/queries should be sent to christopher.lees@gmp.police.uk