Similar to the previous example, the ZVIBERMESSAGE table contains a lot of information, approximately 30 columns of data, but for this example, we are only looking for five attributes, which were previously identified. Most of these appear in the ZVIBERMESSAGE table, so it’s easiest to use this table as a starting point.

We intend to pull the following data in the query:

  •  Username

✓  Message (ZTEXT)

✓  Timestamp (ZDATE)

✓  Message Direction (ZSTATE)

•  Attachment Filename

Notice that references to the Attachment ZATTACHMENT and a phone number ZPHONENUMINDEX are also visible in this table. They will be useful later when creating the JOINS.

This information was entered into SQLite Database Browser by selecting the tab, “Execute SQL.”