The challenges of investigating smartphones devices are paramount. With the rapid development of phone apps, law enforcement agencies and vendors are playing catch up when it comes to reverse engineering the structure of apps and providing evidential data in a reliable manner. With this in mind, phone examiners often resort to manually collecting, examining and reconstructing app data to build a picture of activities. In this session, the presenter will review some of the most effective methods that can be used to examine database files acquired from applications and explore a wide range of tools and advanced searching techniques that can assist examiners in locating critical elements which could be easily missed.