This is a repository of queries to be run against the spotlight database, after it has been parsed and converted to an sqlite database. Use either ios_apt
, or mac_apt_artifact_only
script (or exe) to parse the store.db (spotlight database) first. Then use these queries. Each query targets a specific artifact (like email or safari history), usually from a specific app and should be named as such.
-
Notifications
You must be signed in to change notification settings - Fork 1
Queries for parsed spotlight database in sqlite
License
ydkhatri/spotlight_queries
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
About
Queries for parsed spotlight database in sqlite
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published