Information Technology Reference
In-Depth Information
Name
Length (in bytes)
Offset
Line break
1
0x25
Database version
1
0x26
Number of databases 2
0x27~0x28
Database separator 1
0x29
•
Database name blocks
: These are present after the header information. In each
block, the name length and name are stored.
•
Database records
: These are present after database name blocks and contain real
data. They contain information about database ID, record length, database ver-
sion, database record handle, database unique ID, and so on.
•
Database record fields
: These contain record data length, record type, and record
data.
Once you have access to the BlackBerry backup file, use any of the available tools dis-
cussed in the
Forensic tools for BlackBerry analysis
section to read the information
present in the file.
