Queries for parsed spotlight database in sqlite
☆13Dec 29, 2020Updated 5 years ago
Alternatives and similar repositories for spotlight_queries
Users that are interested in spotlight_queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools for macOS Forensic Bootable media☆16May 20, 2020Updated 6 years ago
- DFIR Reference☆11Jul 30, 2026Updated 3 months ago
- Extract messages from a local Microsoft Teams installation☆16Jan 14, 2023Updated 3 years ago
- Python script that generates a HTML triage report of iOS notifications content.☆18Sep 19, 2019Updated 7 years ago
- Parser fo macOS/iOS FSEvents Logs☆47May 6, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Yet another fseventsd parser for macOS forensics☆13Jul 20, 2024Updated 2 years ago
- A parser for Unified logging tracev3 files☆106Jul 25, 2025Updated last year
- Information about the open-source-dfir slack community☆29Jun 17, 2023Updated 3 years ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Dec 30, 2023Updated 2 years ago
- Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.☆27May 12, 2019Updated 7 years ago
- A script to mine SQLite databases for hidden gems that might be overlooked☆57Sep 19, 2020Updated 6 years ago
- ☆36Jul 16, 2020Updated 6 years ago
- A Forensic SQLite Database Analyser and Reporting Tool written in Python 2.7.☆15Aug 6, 2018Updated 8 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆18Jul 19, 2021Updated 5 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- Script to recover deleted entries in an SQLite database☆198Apr 12, 2016Updated 10 years ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation☆23Dec 18, 2024Updated last year
- Decode security descriptors in $Secure on NTFS☆23Feb 24, 2022Updated 4 years ago
- A library to parse macOS FsEvents☆27Aug 28, 2022Updated 4 years ago
- DeepProbe - Memory Forensics Framework☆16May 16, 2026Updated 5 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Git for me to put all my forensics stuff☆23Sep 2, 2025Updated last year
- Just a bunch of SQLite queries that are useful for manually parsing iOS databases or embedding in scripts☆14Jun 13, 2026Updated 4 months ago
- sms.db SQLite queries for assets listed in the Shared with You Photo Library☆11Sep 21, 2022Updated 4 years ago
- Unserializes any binary|text|file|memory plist data and returns a usable Python dict☆14Jun 11, 2025Updated last year
- lnk_parser is a full rust implementation to parse windows LNK files☆25Feb 17, 2026Updated 8 months ago
- DC3 SQLite Dissect☆77Nov 4, 2024Updated last year
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
- ☆14Sep 23, 2016Updated 10 years ago
- ☆24Mar 12, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A Python, Boto3 script that leverages a forensic volume to attach & mount to a selected instance, run a memory dump, unmount and detach f…☆11Jul 15, 2020Updated 6 years ago
- 🔍Better search for iMessages on MacOS.☆17Sep 24, 2019Updated 7 years ago
- Automatic extraction and parsing of Snapchat for iOS and Android☆52Apr 2, 2024Updated 2 years ago
- Fake iOS Backup Filesystem☆11Mar 4, 2017Updated 9 years ago
- Some Cyber Security related roles Interview Questions☆10Apr 5, 2021Updated 5 years ago
- Quick and dirty script to parse bplists with Ruby☆14Oct 29, 2020Updated 6 years ago
- A DFIR Incident Response AI bot using local Ollama LLM to derrive automated findings from logs☆18Jan 17, 2026Updated 9 months ago