Skip to content
iOS Logs, Events, And Preferences Parser
Python JavaScript CSS
Branch: master
Clone or download

Latest commit

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
scripts Update ilap_artifacts.py May 21, 2020
.gitignore Update .gitignore May 11, 2020
LICENSE Create LICENSE Apr 30, 2020
README.md Update README.md May 14, 2020
ileapp.py GUI updates May 3, 2020
ileappGUI.py Added proper TSV by default export support May 8, 2020
requirements.txt Update requirements.txt May 11, 2020

README.md

iLEAPP

iOS Logs, Events, And Preferences Parser
Details in blog post here: https://abrignoni.blogspot.com/2019/12/ileapp-ios-logs-events-and-properties.html

Supports iOS 11, 12 & 13. Select parsing directly from a compressed .tar/.zip file or a decompressed directory.

Features

Parses:
⚙️ Mobile Installation Logs
⚙️ iOS 12 & 13 Notifications
⚙️ Build Info (iOS version, etc.)
⚙️ Wireless cellular service info (IMEI, number, etc.)
⚙️ Screen icons list by screen and in grid order.
⚙️ ApplicationState.db support for app bundle ID to data container GUID correlation.
⚙️ User and computer names that the iOS device connected to. Function updated by Jack Farley (@JackFarley248, http://farleyforensics.com/).
⚙️ KnowldgeC + Powerlog artifacts. And many, many more...

Installation

Pre-requisites: This project requires you to have Python > 3.7.4 installed on your system.

To install dependencies, run:

pip install -r requirements.txt

To run on Linux, you will also need to install tkinter separately like so:

sudo apt-get install python3-tk

Usage

CLI

$ python ileapp.py -t <zip | tar | fs> -i <path_to_extraction> -o <path_for_report_output>

GUI

$ python ileappGUI.py 

Help

$ python ileapp.py --help

The GUI will open in another window.

You can’t perform that action at this time.