ForensiQL

A client-side SQLite viewer for SOC / DFIR investigations. Open a browser database or any SQLite file and explore it like an analyst — browse tables, run SQL, convert forensic timestamps, extract IOCs and flag suspicious URLs, all in your browser.

Drag & drop a database anywhere, or click to browse.

Supports .db · .sqlite · .sqlite3 · Chrome History, Cookies, Login Data, Favicons, Top Sites · Firefox places.sqlite · Safari History.db · any SQLite file

🔒 100% local. Files are parsed in-browser via WebAssembly and never uploaded. No network requests, analytics, or telemetry.

🧾 IR tip: analyze a forensic copy. ForensiQL never modifies your file and computes its SHA-256 (see DB Info) so you can record integrity in your case notes.