Notifications
Clear all

iMessage Database

4 Posts
4 Users
0 Likes
698 Views
(@bchaseaz)
Posts: 13
Active Member
Topic starter
 

I've obtained an iMessage database from Macbook Air. I'm trying to parse it for relevant text message data.

Does anyone know of any tools that can automatically parse it?
Has anyone parsed the database before?

I'm having a very difficult time figuring out how things are stored, especially when added in the attachments where are stored in separate folders.

Right now I am using MPE's SQL Builder to try to parse the database.

Thank you.

 
Posted : 11/03/2016 10:20 pm
Igor_Michailov
(@igor_michailov)
Posts: 529
Honorable Member
 

Belkasoft supports extracting data from iMessenger's databases of MacOS.

 
Posted : 11/03/2016 11:47 pm
PaulSanderson
(@paulsanderson)
Posts: 651
Honorable Member
 

Hi

I you are trying to create a report on any ANY SQLite database then you may want to try a fully functional demo of my Forensic Toolkit for SQLite software - designed just for this.

It is essentially a drag and drop SQL query building tool with features to recocver deleted records, convert dates and times (and timezones), display blobs as pictures, decode binary plists, Farcebook orca2 message blobs, import external data into a compound report, build maps from geolocation data and much more.

There is more information, tutorial articles and videos and a link to request a fully functional demo here

http//sandersonforensics.com/forum/content.php?195-Forensic-Toolkit-for-SQLite

 
Posted : 13/03/2016 5:28 pm
ForensicMeteor
(@forensicmeteor)
Posts: 60
Trusted Member
 

I'm guessing you're viewing iChat archives? Logorrhea (Mac only) can parse these easily and export to CSV.

http//spiny.com/logorrhea/

 
Posted : 08/04/2016 1:17 am
Share: