ydkhatri / nska_deserialize
NSKeyedArchive plist deserializer
☆25Updated 7 months ago
Alternatives and similar repositories for nska_deserialize:
Users that are interested in nska_deserialize are comparing it to the libraries listed below
- Python utilities related to plists☆54Updated last year
- Dump the iOS Frequent Location binary plist files☆84Updated 6 years ago
- ☆65Updated 2 months ago
- Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.☆190Updated 2 years ago
- A parser for Unified logging tracev3 files☆86Updated last year
- Read and extract data from macOS spotlight databases☆111Updated 2 weeks ago
- Quick iOS Backup UnFunkerizor☆21Updated 3 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆20Updated 11 months ago
- macOS/iOS database location scraper to extract location data☆80Updated 2 years ago
- ☆19Updated 5 years ago
- Forensic Artifact Collection Tool for macOS☆110Updated 7 months ago
- Bash script to extract data from a "chekcra1ned" iOS device☆144Updated 4 years ago
- Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.☆24Updated 5 years ago
- Python script that generates a HTML triage report of iOS notifications content.☆15Updated 5 years ago
- CLBX file format☆20Updated 3 years ago
- Breaking the iCloud Keychain Artifacts☆100Updated last year
- Parser fo macOS/iOS FSEvents Logs☆33Updated 11 months ago
- Forensic toolkit for iOS sysdiagnose feature☆198Updated last week
- A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth☆26Updated 5 months ago
- Decrypt signal.sqlite IOS☆51Updated 5 years ago
- Unserializes any binary|text|file|memory plist data and returns a usable Python dict☆12Updated last year
- Mapping XProtect's obfuscated malware family names to common industry names.☆86Updated last year
- ☆30Updated 4 years ago
- A library to parse macOS FsEvents☆19Updated 2 years ago
- Queries for parsed spotlight database in sqlite☆12Updated 4 years ago
- 010 template for apfs☆25Updated 4 years ago
- script to decrypt iOS keychain☆38Updated last year
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆65Updated last year
- Parses iOS11 messages and handles the 18 digit timestamps. Will parse older iOS versions as long as iOS 11 was installed.☆23Updated 7 years ago
- Python Module for parsing Binary Property List and NSKeyedArchiver files☆82Updated 9 years ago