iOS Logs, Events, And Plist Parser
☆1,039Mar 20, 2026Updated this week
Alternatives and similar repositories for iLEAPP
Users that are interested in iLEAPP are comparing it to the libraries listed below
Sorting:
- Android Logs Events And Protobuf Parser☆790Updated this week
- Returns Logs Events And Properties Parser☆125Dec 24, 2025Updated 2 months ago
- Vehicle Logs Events And Properties Parser☆92Sep 27, 2025Updated 5 months ago
- Apple Pattern of Life Lazy Output'er☆640Feb 25, 2024Updated 2 years ago
- Extract files from Apple devices on Windows, Linux and MacOS. Mostly a wrapper for pymobiledevice3. Creates iTunes-style backups and "adv…☆440Updated this week
- Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.☆205Oct 29, 2022Updated 3 years ago
- macOS (& ios) Artifact Parsing Tool☆1,015Mar 8, 2026Updated last week
- Collection of SQL query templates for digital forensics use by platform and application.☆114Apr 17, 2021Updated 4 years ago
- ☆67Feb 19, 2025Updated last year
- ☆345Sep 23, 2025Updated 5 months ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆32Nov 16, 2023Updated 2 years ago
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆71Mar 19, 2024Updated 2 years ago
- A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, a…☆228Dec 1, 2023Updated 2 years ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆229Jan 6, 2026Updated 2 months ago
- macOS forensic acquisition made simple☆234Mar 6, 2026Updated 2 weeks ago
- Bash script to extract data from a "chekcra1ned" iOS device☆159Jun 7, 2020Updated 5 years ago
- A series of python scripts to extract information from SQLite Data Files☆21Nov 15, 2025Updated 4 months ago
- FQLite - SQLite Forensic Toolkit. FQLite is a tool to find and restore deleted records in SQlite databases. It therefore examines the dat…☆142Feb 20, 2026Updated last month
- The official repo for a project involving a crowdsourced DFIR book. The main purpose of this book is to give anyone interested an opportu…☆219Dec 30, 2025Updated 2 months ago
- Script to recover deleted entries in an SQLite database☆196Apr 12, 2016Updated 9 years ago
- Drones Logs Events And Properties Parser☆16Mar 28, 2024Updated last year
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆340Dec 3, 2025Updated 3 months ago
- Forensic toolkit for iOS sysdiagnose feature☆250Updated this week
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆79Oct 20, 2025Updated 5 months ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated 9 months ago
- A script to convert a Cellebrite UFDR to the original file structure.☆74Mar 21, 2022Updated 4 years ago
- Bash script to extract data from an Android device☆281Oct 28, 2022Updated 3 years ago
- Chrome Logs Events and Protobuf Parser☆39Dec 13, 2022Updated 3 years ago
- xLEAPP - Merging of iLEAPP/RLEAPP/vLEAPP, ALEAPP, cLEAPP☆53Updated this week
- This toolkit aims to help forensicators perform different kinds of acquisitions on iOS devices☆160May 21, 2020Updated 5 years ago
- Decrypt signal.sqlite IOS☆54Jan 9, 2020Updated 6 years ago
- Python script to walk a folder or a zip file for SQLite Databases☆37Sep 20, 2023Updated 2 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆29Sep 9, 2025Updated 6 months ago
- The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifa…☆648Nov 7, 2025Updated 4 months ago
- Logbook for Digital Forensics and Incident Response☆11Jan 21, 2022Updated 4 years ago
- Scripts to process macOS forensic artifacts☆207Aug 4, 2024Updated last year
- A script to mine SQLite databases for hidden gems that might be overlooked☆58Sep 19, 2020Updated 5 years ago
- A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth☆30Dec 3, 2024Updated last year
- Autopsy Python Plugins☆375Aug 12, 2025Updated 7 months ago