If you haven't used it before, Timesketch [1] is excellent indexing and searching timeline data for forensics analysis. MVT takes a (MACB) timeline of your pho

If you haven't used it before, Timesketch [1] is excellent indexing and searching timeline data for forensics analysis. MVT takes a (MACB) timeline of your phone backup file changes and other events - including your text message history. Here is a simple script that I wrote converts it into a format compatible with Timesketch [2] so it's trivial to explore events from the phone, indexed and searchable by time, kind of what you would see in Kibana. [1] https://timesketch.org/ https://timesketch.org/ [2] https://github.com/x1sec/mvt2timesketch https://github.com/x1sec/mvt2timesketch