Skip to content
Python script that generates a HTML triage report of iOS notifications content.
Python
Branch: master
Clone or download
Latest commit a179dc1 Sep 20, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
NotificationParams.txt
README.md
ccl_bplist.py
iOSNotificationsParser.py
script.txt
usage.PNG

README.md

iOS-Notifications-Parser

Python script that generates a HTML triage report of iOS notifications content.

alt text

Usage:
python iOSNotificationsParser.py /path/to/data/directory
Now supports iOS 11 notifications.
python iOSNotificationsParser.py -v {11, 12} /path/to/data/directory

See blog post here for more details:
https://abrignoni.blogspot.com/2019/08/ios-12-notifications-triage-parser.html

For details on the data source location for iO notifications see the blog post here:
https://blog.d204n6.com/2019/08/ios-12-delivered-notifications-and-new.html

Requisites:

  1. Python 3 .
  2. The ccl_bplist module is required for the script to work. It can be found here: https://github.com/cclgroupltd/ccl-bplist (But a version has been inluded in this repo) .
  3. The included script.txt enables fields in the HTML report to be toggled between show and hide.
  4. The included NotificationParams.txt defines which values to be toggled between show and hide. Add more as needed one value per line.

After process is completed a folder will be created in the same directory where the script is located. The folder will be named TriageReports_script_run_timestamp.

Caveat:
Script depends on the UserNotification directory (where notifications on iOS are kept) to be at least one level down (or more) from the data directory provided to the script.

You can’t perform that action at this time.