Skip to content

Latest commit

 

History

History
10 lines (7 loc) · 548 Bytes

README.md

File metadata and controls

10 lines (7 loc) · 548 Bytes

Forensic scripts

Two scripts here to help creating timeline on Linux live systems :

  • filetimeline.py : get a list of files in a folder with their change time, modification time and birth time using stat (which does not give the creation time even if the file system has it)
  • mactime.py : convert this list of files into a csv timeline

Misc :

  • extract_chrome_history.py: extract history from a Chrome History SQlite file
  • ios_unpack.py : unpack iOS backup folder from iTunes or libimobiledevice