Skip to content

Latest commit

 

History

History
 
 

forensic

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 

Forensic scripts

Two scripts here to help creating timeline on Linux live systems :

  • filetimeline.py : get a list of files in a folder with their change time, modification time and birth time using stat (which does not give the creation time even if the file system has it)
  • mactime.py : convert this list of files into a csv timeline

Misc :

  • extract_chrome_history.py: extract history from a Chrome History SQlite file
  • ios_unpack.py : unpack iOS backup folder from iTunes or libimobiledevice