Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

iChat Message Parser

This EnScript parses *.ichat messages of the type created by the Mac OS X Messages application.

The script will write its output in the form of bookmarks and individual text files, one per *.ichat file. The latter will be written into a folder of the user's choosing.

Please note that the script only supports plaintext message content; it does not support binary attachments. Emoticons will be visible in the output-files provided they're viewed on a system that supports them, Mac OS X for instance.

Timestamps are interpreted taking into account the TZ settings of the associated evidence file.

Download Now



Version: 1
Tested with:
EnCase Forensic 7.1
Developer: Simon Key
Category: Artifact

8538 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
9874 Downloads
App
Artifact

Cortana Search Decoder

Decodes the search terms stored in IndexedDB.edb files used by the Microsoft Windows Cortana search function.
By Simon Key
7593 Downloads
App
Artifact

ShellBags Parser

Parses recent-folder view settings maintained by the Microsoft Windows operating system.
By Simon Key
362 Downloads
App
Artifact

User Assist Registry Value Decoder

Decodes data used by the Microsoft Windows operating system to populate each user's start menu with frequently used applications.
By Simon Key
214 Downloads
App