Brigs

iLEAPP. iOS Logs, Events, And Plist Parser

ALEAPP. Android Logs Events And Protobuf Parser

RLEAPP. Returns Logs Events And Properties Parser

DFIR-SQL-Query-Repo. Collection of SQL query templates for digital forensics use by platform and application.

VLEAPP. Vehicle Logs Events And Properties Parser

iOS-Mobile-Installation-Logs-Parser. Roff

WLEAPP. WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.

Android-Usagestats-XML-Protobuf. Android Usagestats XML + Protobuf Parser

iOS-KnowledgeC-StructuredMetadata-Bplists. Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.

JSON-to-HTML-and-XLS. Simple script to convert JSON to html or excel

iOS-Snapshot-Triage-Parser. Python

DLEAPP. Drones Logs Events And Properties Parser

iOS-Notifications-Parser. Python script that generates a HTML triage report of iOS notifications content.

AI_Provenance_Scanner. Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation

DFIRlogbook. Logbook for Digital Forensics and Incident Response

Whatsapp-ManualBUP-Parser. Python

iTunes_Backup_Reader. Python 3 Script to parse out iTunes backups

Leveldb-py. Leveldb Dumper/Viewer

iTunesBackup-Snapshot-Triage-Parser. Python

UIDAS. Union, Intersection, Difference, and Symmetric Difference of the per line content of two text files.

Torrent-Infohash-Calculate-Compare-Dedup. Python

DLEAPP. DLEAPP — Desktop Logs Events And Protobuf Parser. A LEAPP for triaging desktop-application artifacts (Electron/Chromium).

UsRT. Android Usage Stats and Recent Tasks Graphical Parser

leveldb-datadump-scripts. Scripts to assist in exporting data from a leveldb data store.

frame-counts-galore. Python wrapper for FFMPEG that extracts frames from media.

Android-LauncherDB-Parser. Python

Twines. Choose your own DFIR adventures

batch-leapp. Batch-run any LEAPP tool (iLEAPP/ALEAPP/RLEAPP/VLEAPP) over a folder of extractions — themed HTML report index, SHA-256 manifest, GUI + CLI.

LEAPP-Art-Misc. Misc. art & other matters related to the LEAPP projects

Misc-Scripts. Miscellaneous Scripts

Android-Recent-Tasks-XML-Parser. Python

LDPS. Python

blackboxprotobuf. Blackbox protobuf is a library for decoding and modifying arbitrary protobuf messages without the protobuf type definition.

NikeRunApp-Geoparser. Scripts extract latitudes and longitudes as a CSV from the Nike Run app database.

MSFT-Translate-Android-Parser. Microsoft Translate Android app parser for the xml/json data store.

leapps-website. HTML