Python Module for parsing Binary Property List and NSKeyedArchiver files
☆84Feb 23, 2016Updated 10 years ago
Alternatives and similar repositories for ccl-bplist
Users that are interested in ccl-bplist are comparing it to the libraries listed below
Sorting:
- Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.☆27May 12, 2019Updated 6 years ago
- Python utilities related to plists☆55Oct 28, 2025Updated 4 months ago
- Parse and Generate binary plists and NSKeyedArchiver archives☆16Oct 5, 2022Updated 3 years ago
- ☆22Oct 3, 2019Updated 6 years ago
- Generate/parse macOS Alias records from Python☆25Mar 1, 2026Updated last week
- Collection of SQL query templates for digital forensics use by platform and application.☆112Apr 17, 2021Updated 4 years ago
- 010 template for apfs☆26Feb 26, 2021Updated 5 years ago
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆108Feb 22, 2018Updated 8 years ago
- A fork of The Sleuthkit with Pooled Storage and APFS support. See https://www.youtube.com/watch?v=k1XPillJ7aw for more info and usage.☆26Oct 27, 2019Updated 6 years ago
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆70Mar 19, 2024Updated last year
- Presentation Archives for my macOS and iOS Related Research☆261Mar 18, 2025Updated 11 months ago
- ☆67Feb 19, 2025Updated last year
- Forensic Scripts☆155Mar 28, 2025Updated 11 months ago
- ☆22Jan 6, 2023Updated 3 years ago
- Python script that generates a HTML triage report of iOS notifications content.☆17Sep 19, 2019Updated 6 years ago
- Various Android tools, utilities and modules☆54Jul 22, 2024Updated last year
- Script to recover deleted entries in an SQLite database☆196Apr 12, 2016Updated 9 years ago
- Parse and Generate binary plists and NSKeyedArchiver archives☆22May 19, 2025Updated 9 months ago
- CLBX file format☆20May 13, 2021Updated 4 years ago
- A parsing tool for backgrounditems.btm☆52Aug 23, 2024Updated last year
- ☆44Feb 27, 2017Updated 9 years ago
- Parses iOS11 messages and handles the 18 digit timestamps. Will parse older iOS versions as long as iOS 11 was installed.☆23Apr 26, 2018Updated 7 years ago
- iOS Backup Examiner - A forensics tool for parsing an iOS backup's Info.plist file☆23Dec 5, 2016Updated 9 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆17Oct 8, 2016Updated 9 years ago
- Python 3 Script to parse out iTunes backups☆190Oct 16, 2023Updated 2 years ago
- Admin for☆16Jun 3, 2018Updated 7 years ago
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Nov 19, 2021Updated 4 years ago
- Parser for OSX/iOS FSEvents Logs☆276Dec 4, 2024Updated last year
- Carve NTFS USN records from binary data☆27May 21, 2017Updated 8 years ago
- Apple Pattern of Life Lazy Output'er☆639Feb 25, 2024Updated 2 years ago
- Automatically create iSCSI targets for all drives except for a boot device☆25May 23, 2025Updated 9 months ago
- Chrome Logs Events and Protobuf Parser☆39Dec 13, 2022Updated 3 years ago
- SysScout is a fully encapsulated script that quickly and easily pulls local machine information from Linux-Based systems. A simple, easy…☆13Oct 20, 2017Updated 8 years ago
- Various Topics☆18Apr 30, 2025Updated 10 months ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Parses the WMI object database....looking for persistence☆34Dec 12, 2019Updated 6 years ago
- ☆12Jun 3, 2022Updated 3 years ago
- Python Module for parsing Apple ASL Logs☆15Apr 7, 2016Updated 9 years ago