5 ms·

Thanks for those great tools recs. Had never seen mvt before and I'm running a check of my local iTunes backup with it now! (Funnily, this seems one of the easi

by varenc 3y ago

Thanks for those great tools recs. Had never seen mvt before and I'm running a check of my local iTunes backup with it now! (Funnily, this seems one of the easier ways to backup my text message history into an easily searchable form)

x1sec 3y ago
If you haven't used it before, Timesketch [1] is excellent indexing and searching timeline data for forensics analysis. MVT takes a (MACB) timeline of your phone backup file changes and other events - including your text message history. Here is a simple script that I wrote converts it into a format compatible with Timesketch [2] so it's trivial to explore events from the phone, indexed and searchable by time, kind of what you would see in Kibana. [1] https://timesketch.org/ https://timesketch.org/ [2] https://github.com/x1sec/mvt2timesketch https://github.com/x1sec/mvt2timesketch
- fomine3 3y ago
  Thank you for your every post, very informative!