A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth
☆30Dec 3, 2024Updated last year
Alternatives and similar repositories for iCatch
Users that are interested in iCatch are comparing it to the libraries listed below
Sorting:
- ☆35Feb 24, 2026Updated 3 weeks ago
- A script to convert a Cellebrite UFDR to the original file structure.☆74Mar 21, 2022Updated 4 years ago
- Extract files from Apple devices on Windows, Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "adv…☆440Updated this week
- Various Android tools, utilities and modules☆54Jul 22, 2024Updated last year
- Vault of Windows Registry forensic artifacts☆28Nov 12, 2025Updated 4 months ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆18Apr 30, 2025Updated 10 months ago
- This is a new repository used to provide updated SQLite queries for both Photos.sqlite databases. Most of the updated queries will work o…☆13Mar 29, 2024Updated last year
- Read and extract data from macOS spotlight databases☆129Dec 7, 2025Updated 3 months ago
- Just a bunch of SQLite queries that are useful for manually parsing iOS databases or embedding in scripts☆14Jan 20, 2026Updated 2 months ago
- Forensic tool for extracting and analyzing Google DriveFS cached files and metadata.☆20May 9, 2025Updated 10 months ago
- Quick iOS Backup UnFunkerizor☆22May 25, 2021Updated 4 years ago
- A script to mine SQLite databases for hidden gems that might be overlooked☆58Sep 19, 2020Updated 5 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆29Sep 9, 2025Updated 6 months ago
- Vehicle Logs Events And Properties Parser☆92Sep 27, 2025Updated 5 months ago
- Yet another fseventsd parser for macOS forensics☆12Jul 20, 2024Updated last year
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated 9 months ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆41Feb 28, 2026Updated 3 weeks ago
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆71Mar 19, 2024Updated 2 years ago
- CyberChef update scripts in PowerShell & Bash☆18Apr 22, 2024Updated last year
- Returns Logs Events And Properties Parser☆125Dec 24, 2025Updated 2 months ago
- Windows Forensics Salt States☆21Updated this week
- Queries to use on the store.cloudphotodb database. Provides you with iCloud Photos Sync directions and other information☆12Sep 4, 2023Updated 2 years ago
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆37Updated this week
- Assorted Python☆15Sep 6, 2024Updated last year
- FQLite - SQLite Forensic Toolkit. FQLite is a tool to find and restore deleted records in SQlite databases. It therefore examines the dat…☆142Feb 20, 2026Updated last month
- ☆11Aug 3, 2018Updated 7 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆16Mar 3, 2026Updated 2 weeks ago
- Slightly tweaked homepod usb / uart adapter☆36Jul 2, 2025Updated 8 months ago
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Nov 19, 2021Updated 4 years ago
- Parses USB connection artifacts from offline Registry hives☆107Feb 8, 2026Updated last month
- ☆23Jan 27, 2025Updated last year
- mister-skinnylegs is an open plugin framework for parsing website/webapp artifacts in browser data. It currently provides a command line …☆19Nov 14, 2025Updated 4 months ago
- This free tool parses Google Takeout Location History Exports or Google Semantic Location History Warrant Return Data in a forensic manne…☆40Sep 26, 2025Updated 5 months ago
- A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…☆11Jun 19, 2025Updated 9 months ago
- A repository to host emojis used in the Digital Forensics Discord Server☆18May 28, 2022Updated 3 years ago
- DC3 SQLite Dissect☆72Nov 4, 2024Updated last year
- ☆28Oct 15, 2025Updated 5 months ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated last year
- ☆22Jan 6, 2023Updated 3 years ago