Download |
Download Current Pack Download all of the latest parsers in one convienient package. |
Activity |
Download | Health Activity - 4.0.0 Parses Health information including Steps Walked, Distance Travelled, Flights Climbed etc. along with other Health data such as Nutrition, Weight and Symptoms. |
Applications |
Download | Installed Apps - 4.0.1 This parser polls all installed apps to get version information, purchase date and account used etc. |
Device |
Download | Battery - 4.0.0 Find Battery state information from both knowledgeC and/or Power Logs. |
Download | Buttons - 4.0.0 Discover Button push information as recorded in Power Logs. |
Download | Camera Use - 4.0.0 Find the start and end time of Camera Use, as per the Power Logs. |
Download | CarPlay App Usage - 4.0.0 Find limited CarPlay usage data. |
Download | Data Usage - 4.0.1 Parse the Cellular Data Usage information found in DataUsage.sqlite. |
Download | iOS Updates - 4.0.0 Find the date of OS Updates as per containermanager.log. |
Download | Passcode Change - 4.0.0 Find the time of changes to the device passcode. |
Download | Plugged In - 4.0.0 Parses time and date information about Device Charging events from knowledgeC and PowerLogs. |
Download | Power Events - 4.0.0 Parses Power On/Off events from various log files. |
Download | PowerLog Speaker - 4.0.0 Parses Audio Route information from Power Logs. |
Download | Ringer - 4.0.0 Parses the On and Off times for the device ringer (switch) as per Power Logs. |
Download | Time Changes - 4.0.0 This parser displays the time zone change events from the lockdown.log files. |
Download | Torch - 4.0.1 Parses the On and Off times for the device flashlight as per Power Logs. |
Download | Wipe Events - 4.0.0 Parses the last Wipe Event time by utilizing several different sources such as .obliterated, containermanager and purplebuddy. |
Download | Wifi Networks - 4.0.0 Parses connected networks information from com.apple.wifi.plist and attempts to locate the network by cross-referencing against cache_encryptedB.db. |
Device Events |
Download | Alarm - 4.0.0 Discover the alarms on a device from records found in knowledgeC and Biome. |
System |
Download | Apps - 4.0.2 This is an important parser for identifying the installed applications. |
Download | BPListParser - 4.0.5 Binary Plist Parser is a required DLL |
Download | Contacts - 4.0.0 The parser responsible for processing the main Address Book. |
Download | DeviceDetails - 4.0.2 The parser responsible for the main Device Info page such as device name, OS version and phone number etc. |
Download | DeviceImages - 4.0.0 The DLL responsible for housing the device images and model information. |
Download | Locations - 4.0.6 The parser responsible for the Locations tab, supporting many different files and location types. The latest update includes support for KML files. |
Download | ProtobufParser - 4.0.0 Binary Plist Parser is a required DLL |
KnowledgeC |
Download | AirDrop - 4.0.0 Parses a limited amount of AirDrop data from knowledgeC, InteractionC and PowerLogs. |
Download | Airplane Mode - 4.0.0 Start and End Times for Airplane mode found in knowledgeC. |
Download | Application Focus - 4.0.0 Find which application was on screen, when and for how long from records found in knowledgeC. |
Download | App Intents - 4.0.0 Intents are an important way for applications to communicate with the OS and can leave traces behind which have forensic value. This parser recovers App Intent data from knowledgeC. |
Download | Application Usage - 4.0.1 Find which Application was being used when from data found in knowledgeC. |
Download | AudioRoute - 4.0.0 This parser uses knowledgeC to identify the routing of audio such as calls, music or videos. |
Download | Backlight - 4.0.0 Find the time and date of backlight events from knowledgeC. |
Download | Battery Temperature - 4.0.0 Parse the recorded battery temperature from knowledgeC which *may* be indicative of the external environment temperature. |
Download | Bluetooth Connections - 4.1.3 Parse the start and end times of Bluetooth connections as well as information about the connected device. |
Download | Device Locked - 4.0.0 Discover the time of device Lock and Unlock events from knowledgeC and/or Power Logs. |
Download | Do Not Disturb - 4.0.0 Find the start and end times of Do Not Disturb Mode from knowledgeC. |
Download | Keybag Lock - 4.0.0 Parses Lock and Unlock information related to the Keybag as per knowledgeC. |
Download | Media Playing - 4.0.0 Parses information about the media item being played via the device. |
Download | Notifications - 4.0.0 Parse Notifications from KnowledgeC. |
Download | Orientation - 4.0.0 Parse available Device Orientation information from knowledgeC or Biome. |
Download | PinDrops - 4.0.0 Parses Apple Maps pindrop information found in knowledgeC. |
Download | Siri - 4.0.0 Parses information about Siri Use from knowledgeC. |
Download | Web Usage - 4.0.0 Parse Web Usage information found in knowledgeC. |
Download | WiFi Connections - 4.0.0 This parser displays connection information to wireless networks as found in knowledgeC. |
Locations |
Download | Apple Pay Location - 4.0.0 Find the location of Apple Pay transactions made with iPhone or Apple Watch. |
Download | Cached Locations - 4.0.0 Parses Location information from the ZRTCLLOCATIONMO table. |
Download | Cell Tower Connections - 4.0.0 Display the First and Last connection DATE (not time) of Cell Towers. |
Download | GeoFences - 4.0.0 Find information about the configured GeoFences from consolidated.db. |
Download | Device Analytics - 4.0.0 Find locations related to Wireless networks from within the Device Analytics database. |
Download | EncryptedB Cache - 4.0.0 Parse the locations of the device stored in cache_encryptedB (Pre iOS10). |
Download | EncryptedB WiFi - 4.0.0 Parse the locations of cache_encryptedB wireless network records. |
Download | Media Locations - 4.0.0 This parser pulls location data from the EXIF information found in Photos.sqlite. |
Download | Find My - 4.0.0 Discover information from the device related to the FindMy app, including Devices and Items. |
Download | Frequent Locations - 4.0.0 Display Frequent Location information along with Entry and Exit times. |
Download | Google Takeout - 4.0.0 Parse Location information from the Records.json file of a Google Takeout report. |
Download | Analytics Locations - 4.0.0 Parses Location information from the various image analytics databases. |
Download | Location Archive - 1.3.0 No description at this time. |
Download | Locations Biome - 4.0.0 Parse location information from Location Biome. |
Download | MapsSync - 4.0.0 Parses Search and Route Planning information from Apple Maps. |
Download | Prediction Context - 4.0.0 Parse location information from PredictionContext Biome. |
Download | Tesla Location - 4.0.0 This parser recovers Location information from the Tesla application. |
Download | Vehicle Locations - 4.0.0 Parses location information at the time of a phone-car bluetooth disconnect (ie. park) event. |
Download | Visible Networks - 4.0.0 Parses the locations of networks visible at the state time. |
Download | Zenly Locations - 4.0.0 Parses location information from the Zenly app. |
Media |
Download | Live Photos - 4.0.0 Parse Live Photos and associated metadata from photos.sqlite. |
Download | Photos - 4.0.0 Parse Photos and associated metadata from Photos.sqlite. |
Download | SnapChat Memory - 4.0.0 Utilizes keychain information to decrypt the Snapchat media including My Eyes Only. |
Download | Videos - 4.0.0 Parse Videos and associated metadata from Photos.sqlite. |
Other |
Download | Apple Pay - 4.0.0 Find Apple Pay Transaction information from an iPhone or Apple Watch. |
Download | Google Translate - 4.0.0 Find Translation requests made via Google Translate. |
Download | Notes - 4.0.0 Parses Notes from the standard iOS Notes application, including Encrypted notes (with known password) up to iOS15. |
Download | Shortcuts - 4.0.0 Parses information about any Shortcuts the user may have created on their device. |
Web History |
Download | Chrome History - 4.0.0 Parse Web History records from Google Chrome. |
Download | Edge History - 4.0.0 Parse Internet History records from Microsoft Edge. |
Download | Firefox History - 4.0.0 Parse Internet History from Firefox internet browser. |
Download | Safari History - 4.0.2 Parses Internet History records from the Safari web browser. |
Download | Safari Browser State - 4.0.0 Parses information about Safari Browser Sessions & Tabs. |
Download | Safari Favicons - 4.0.0 Parses Web History information from the FavIcons database. |
Download | Safari Search History - 4.0.0 Parses searches conducted via the Search bar in Safari. |
Communication |
Download | Call History - 4.0.0 Parse Call History artifacts from CallHistory.db. Includes Cellular, Facetime, Facetime Audio and 3rd apps that make use of the phone app. |
Download | Discord - 4.0.0 Parse Discord Messages from cached records. |
Download | Email - 4.0.0 Parses the native email client. |
Download | Instagram - 4.0.0 Recover Direct Messages from Instagram. |
Download | Message Intents - 4.1.0 An 'Intent' is a way for applications to communicate with the OS. This parser targets intents related to messages found in knowledgeC and Biomes. |
Download | Recents - 4.0.0 Parses Recent communication information from the Recents database. |
Download | SMS - 4.0.0 Find SMS/MMS and iMessage data from sms.db. |
Download | SnapChat - 4.0.0 Parses messages from Snapchats chatConverstaionStore.plist file. |
Download | SnapChat - 4.1.0 Parses messages from Snapchats Arroyo.db database. |
Download | VoiceMail - 4.0.0 Parses Voicemails and Voicemail Transcripts (if available). |
Custom |
Download | Last Modified Files - 4.0.0 This parser helps you find files of a certain extension within the time frame you are looking at. By default, files such as Images, Video and Configuration files are included. |