Skip to content
Read and extract data from macOS spotlight databases
Python
Branch: master
Clone or download
Latest commit e8675b0 May 19, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE.txt Create LICENSE.txt Jul 25, 2018
README.md Update README.md May 19, 2019
spotlight_parser.py Fixed bug introduced by last commit May 19, 2019

README.md

spotlight_parser

This code reads and extracts data from macOS spotlight databases.

License

GPL v3

Dependencies

The code needs python (2.7 or 3.6+) and the following python packages installed:

  • lz4
  • enum34

Both can be installed using the command pip install lz4 enum34

Usage

This script will process individual Spotlight database files. These files are found under the volume at location /.Spotlight-V100/Store-V2/<UUID> where <UUID> represents a store id. In that folder you should find files named store and .store which are the Spotlight databases. Provide these as input to this script.

spotlight_parser.py [-p OUTPUT_PREFIX] <path_to_database> <output_folder>

Example: python spotlight_parser.py c:\spot\store c:\output

Thanks

Mason Bartle for porting the code to python3.

You can’t perform that action at this time.