Skip to content
Read and extract data from macOS spotlight databases
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE.txt
README.md
spotlight_parser.py

README.md

spotlight_parser

This code reads and extracts data from macOS spotlight databases.

License

GPL v3

Dependencies

The code needs python 2.7 and the following python packages installed:

  • lz4
  • enum34

Both can be installed using the command pip install lz4 enum34

Usage

This script will process individual Spotlight database files. These files are found under the volume at location /.Spotlight-V100/Store-V2/<UUID> where <UUID> represents a store id. In that folder you should find files named store and .store which are the Spotlight databases. Provide these as input to this script.

spotlight_parser.py [-p OUTPUT_PREFIX] <path_to_database> <output_folder>

Example: python spotlight_parser.py c:\spot\store c:\output

You can’t perform that action at this time.