A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file
☆227Dec 1, 2023Updated 2 years ago
Alternatives and similar repositories for iOS-Forensics-References
Users that are interested in iOS-Forensics-References are comparing it to the libraries listed below
Sorting:
- ☆345Sep 23, 2025Updated 5 months ago
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆18Apr 30, 2025Updated 10 months ago
- Returns Logs Events And Properties Parser☆125Dec 24, 2025Updated 2 months ago
- iOS Logs, Events, And Plist Parser☆1,033Mar 12, 2026Updated last week
- A script to convert a Cellebrite UFDR to the original file structure.☆74Mar 21, 2022Updated 3 years ago
- Bash script to extract data from an Android device☆281Oct 28, 2022Updated 3 years ago
- Android Logs Events And Protobuf Parser☆779Mar 12, 2026Updated last week
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆79Oct 20, 2025Updated 5 months ago
- Extract files from Apple devices on Windows, Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "adv…☆440Updated this week
- Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.☆205Oct 29, 2022Updated 3 years ago
- Vehicle Logs Events And Properties Parser☆92Sep 27, 2025Updated 5 months ago
- CLBX file format☆20May 13, 2021Updated 4 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆29Sep 9, 2025Updated 6 months ago
- A parser for Unified logging tracev3 files☆97Jul 25, 2025Updated 7 months ago
- macOS forensic acquisition made simple☆226Mar 6, 2026Updated 2 weeks ago
- Android Usagestats XML + Protobuf Parser☆28Oct 11, 2020Updated 5 years ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆229Jan 6, 2026Updated 2 months ago
- Assorted Python☆15Sep 6, 2024Updated last year
- A DFIR tool to analyze artifacts on macOS☆35Jan 18, 2021Updated 5 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆93Sep 7, 2023Updated 2 years ago
- macOS (& ios) Artifact Parsing Tool☆1,009Mar 8, 2026Updated last week
- Queries to use on the store.cloudphotodb database. Provides you with iCloud Photos Sync directions and other information☆12Sep 4, 2023Updated 2 years ago
- MS Word (DOCx) Parsing Tool☆25Updated this week
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated 8 months ago
- Python based tool to extract forensic info from EventTranscript.db (Windows Diagnostic Data)☆68Sep 13, 2023Updated 2 years ago
- Apple Pattern of Life Lazy Output'er☆640Feb 25, 2024Updated 2 years ago
- Quick iOS Backup UnFunkerizor☆22May 25, 2021Updated 4 years ago
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆71Mar 19, 2024Updated 2 years ago
- Script to recover deleted entries in an SQLite database☆196Apr 12, 2016Updated 9 years ago
- Resources provided by the community that can serve to be useful for Law Enforcement worldwide☆119Jul 25, 2024Updated last year
- Forensic Artifact Collection Tool for macOS☆118Jul 28, 2025Updated 7 months ago
- Chrome Logs Events and Protobuf Parser☆39Dec 13, 2022Updated 3 years ago
- Script to process PDF files☆21May 23, 2025Updated 9 months ago
- Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.☆52Jan 26, 2025Updated last year
- mift - a mobile image forensic toolkit☆46Nov 14, 2023Updated 2 years ago
- Automatic extraction and parsing of Snapchat for iOS and Android☆45Apr 2, 2024Updated last year
- Avilla Forensics FREE☆1,008Dec 10, 2025Updated 3 months ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆32Nov 16, 2023Updated 2 years ago
- Decrypt signal.sqlite IOS☆54Jan 9, 2020Updated 6 years ago