MetadataForensics
Alongside seeking the digital truth and client satisfaction in all our cases, we also strive to further the DFIR Community with our research and work products.
Metadata Forensics, LLC
Pinned Repositories
iLEAPP
iOS Logs, Events, And Plist Parser
RLEAPP
Returns Logs Events And Properties Parser
Apple-Watch-Sleep-Data
Apple-Watch-Worn-Data
Our SQL query for an "at a glance" review of time periods in which the Apple Watch is worn. This data can lend to pattern of life analysis as well as providing structure to periods in which data such as heart rate data will be generated and recorded.
Brute-Force-Dictionary-List-Generator
This free tool supports both 4-digit and 6-digit passcode lists with easy-to-use application navigation.
Google-Location-History-Data-Parser
This free tool parses Google Takeout Location History Exports or Google Semantic Location History Warrant Return Data in a forensic manner.
iLEAPP
iOS Logs, Events, And Plist Parser
siriremembers
SQL queries for parsing the siriremembers.sqlite3 database found in Apple devices. These queries were formed through original research into this matter, additional testing, and used to parse similar data through various iOS versions.
MetadataForensics's Repositories
MetadataForensics/Google-Location-History-Data-Parser
This free tool parses Google Takeout Location History Exports or Google Semantic Location History Warrant Return Data in a forensic manner.
MetadataForensics/Brute-Force-Dictionary-List-Generator
This free tool supports both 4-digit and 6-digit passcode lists with easy-to-use application navigation.
MetadataForensics/RLEAPP
Returns Logs Events And Properties Parser
MetadataForensics/siriremembers
SQL queries for parsing the siriremembers.sqlite3 database found in Apple devices. These queries were formed through original research into this matter, additional testing, and used to parse similar data through various iOS versions.