QuickBooks Forensics (developed by Thegrideon Software) is a specialized digital forensics, data recovery, and password management tool designed for QuickBooks Desktop company files (.qbw) and backups (.qbb). It is not an Intuit product, but rather a third-party utility widely used by financial investigators, forensic accountants, and IT administrators to audit and extract data.
Unlike a standard QuickBooks user interface, which relies on the active software and security permissions, QuickBooks Forensics acts as a direct database reader that bypasses the standard UI to look at the raw SQL Anywhere database underneath. Key Capabilities and Features
In-Depth Data Access & Extraction: It reads company files directly to list all database tables, schemas, and columns. Investigators can view protected records and bulk-export database tables into .xml or .csv formats.
Password Recovery & Replacement: The software allows investigators to instantly reset or replace Admin-level user passwords. For password recovery (Admin and non-Admin accounts), it supports queued brute-force and dictionary attacks. For newer QuickBooks versions, it supports AMD and NVIDIA GPU acceleration to speed up the process.
Deleted Record Recovery: It scans database pages to uncover and recover deleted or lost records/tables.
Sensitive Data Decryption: QuickBooks encrypts “sensitive data” (e.g., Credit Card numbers, SSNs, and Bank Account details). The software features native capabilities to decrypt and access this information.
Transaction Log (.tlg) Inspection: It provides a built-in viewer for Transaction Log files, which are highly critical in fraud investigations as they log when and how transactions were modified, voided, or deleted. Important Distinction: Portable File vs. Forensics
The phrase “QuickBooks Forensics” shouldn’t be confused with a QuickBooks Portable Company File (.qbm). A portable file is a compact, condensed version of a regular company file that an active business user might email to an accountant. A portable file does not contain images or logos and is used for routine file transfers.
If your goal is to share standard company data with an accountant, use the built-in Portable Company File feature in QuickBooks Desktop. However, if your goal is to investigate fraud, recover lost credentials, or extract unreadable database tables, you would use a specialized utility like QuickBooks Forensics.
Let me know, and I can provide more specific instructions on how to proceed. QuickBooks Desktop Backup vs Portable Files – Apps4Rent
Leave a Reply