Skip to content
Read and extract data from macOS spotlight databases
Branch: master
Clone or download
Pull request Compare This branch is 1 commit ahead, 5 commits behind ydkhatri:master.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE.txt
README.md
spotlight_parser.py

README.md

spotlight_parser

This code reads and extracts data from macOS spotlight databases.

License

GPL v3

Dependencies

The code needs the following python packages installed:

  • lz4
  • enum34

Both can be installed using the command pip install lz4 enum34

Usage

This script will process individual Spotlight database files. These files are found under the volume at location /.Spotlight-V100/Store-V2/<UUID> where <UUID> represents a store id. In that folder you should find files named store and .store which are the Spotlight databases. Provide these as input to this script.

spotlight_parser.py [-p OUTPUT_PREFIX] <path_to_database> <output_folder>

Example: python spotlight_parser.py c:\spot\store c:\output

You can’t perform that action at this time.