iLEAPP v2.0.1 & ALEAPP 3.2.5
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
November 21, 2024 at 1:20 AM
iLEAPP v2.0.1 & ALEAPP 3.2.5
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
Open-Source Tools
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
Data Risk Management - Data Discovery & Privacy Platform | Exterro
Exterro's powerful data risk management platform unifies e-discovery, privacy, data governance, digital forensics, and cybersecurity compliance to…
exterro.com
December 4, 2024 at 8:43 PM
Open-Source Tools
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
November 20, 2024 at 5:03 PM
February 17, 2025 at 2:25 PM
Hey wake up, a new #iLEAPP release is out! github.com/abrignoni/iL...
December 16, 2024 at 4:11 PM
Hey wake up, a new #iLEAPP release is out! github.com/abrignoni/iL...
For parsing #iOS & #Android extractions:
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
Check out these powerful open-source tools—TRACE, UFADE, ParseUSBs, xeuledoc, and EventLogExpert—that provide DFIR investigators with flexible, cost-effective solutions for complex digital investigations. ##digitalforensics
Open-Source Solutions For Digital Forensic Investigators
Check out these powerful open-source tools—TRACE, UFADE, ParseUSBs, xeuledoc, and EventLogExpert—that provide DFIR investigators with flexible, cost-effective solutions for complex digital investigations.
www.forensicfocus.com
November 12, 2024 at 8:01 PM
For parsing #iOS & #Android extractions:
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
iLEAPP 2.0 just released!!
🗳️ New report folder structure.
🗳️ LAVA (LEAPPs Artifacts Viewer Analyzer) data structures added.
🗳️ Presenting LAVA (beta version) at the Cyber Social Hub online conference next month.
🗳️ Binaries will be released soon.
youtu.be/1TKBS1fuR-0?...
🗳️ New report folder structure.
🗳️ LAVA (LEAPPs Artifacts Viewer Analyzer) data structures added.
🗳️ Presenting LAVA (beta version) at the Cyber Social Hub online conference next month.
🗳️ Binaries will be released soon.
youtu.be/1TKBS1fuR-0?...
iLEAPP 2.0 - Big Changes!
YouTube video by Alexis Brignoni
youtu.be
November 5, 2024 at 1:50 AM
iLEAPP 2.0 just released!!
🗳️ New report folder structure.
🗳️ LAVA (LEAPPs Artifacts Viewer Analyzer) data structures added.
🗳️ Presenting LAVA (beta version) at the Cyber Social Hub online conference next month.
🗳️ Binaries will be released soon.
youtu.be/1TKBS1fuR-0?...
🗳️ New report folder structure.
🗳️ LAVA (LEAPPs Artifacts Viewer Analyzer) data structures added.
🗳️ Presenting LAVA (beta version) at the Cyber Social Hub online conference next month.
🗳️ Binaries will be released soon.
youtu.be/1TKBS1fuR-0?...
🚨 New file structure might contain email related data in BFU extractions!!! Also spotlight related data.
🚨 An iLEAPP artifact is available.
🙏 Thanks to John Hyla for the research & parser.
🔗 Check the post here: https://buff.ly/41Cv3Zp
#MobileForensics
🚨 An iLEAPP artifact is available.
🙏 Thanks to John Hyla for the research & parser.
🔗 Check the post here: https://buff.ly/41Cv3Zp
#MobileForensics
December 4, 2024 at 11:37 PM
🚨 New file structure might contain email related data in BFU extractions!!! Also spotlight related data.
🚨 An iLEAPP artifact is available.
🙏 Thanks to John Hyla for the research & parser.
🔗 Check the post here: https://buff.ly/41Cv3Zp
#MobileForensics
🚨 An iLEAPP artifact is available.
🙏 Thanks to John Hyla for the research & parser.
🔗 Check the post here: https://buff.ly/41Cv3Zp
#MobileForensics
🚀 iLEAPP + ALEAPP v2026.1.0 are out!
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
Releases — LEAPPs
Download the latest releases of iLEAPP, ALEAPP, RLEAPP, VLEAPP, and LAVA — free open-source digital forensics tools.
leapps.org
July 11, 2026 at 4:07 AM
🚀 iLEAPP + ALEAPP v2026.1.0 are out!
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
January 29, 2025 at 2:01 PM
🌻 iLEAPP 2.1.0 is out!
🌹 Filter for modules in the GUI
🌼 Pre-release media manager for LAVA
🌺 New modules & enhancements
🏵️ Thanks to Johann Polewczyk for the filter code, LAVA updates, and the release builds.
🌸 Get it here: https://buff.ly/41vJ9vb
🌹 Filter for modules in the GUI
🌼 Pre-release media manager for LAVA
🌺 New modules & enhancements
🏵️ Thanks to Johann Polewczyk for the filter code, LAVA updates, and the release builds.
🌸 Get it here: https://buff.ly/41vJ9vb
February 18, 2025 at 5:53 PM
🌻 iLEAPP 2.1.0 is out!
🌹 Filter for modules in the GUI
🌼 Pre-release media manager for LAVA
🌺 New modules & enhancements
🏵️ Thanks to Johann Polewczyk for the filter code, LAVA updates, and the release builds.
🌸 Get it here: https://buff.ly/41vJ9vb
🌹 Filter for modules in the GUI
🌼 Pre-release media manager for LAVA
🌺 New modules & enhancements
🏵️ Thanks to Johann Polewczyk for the filter code, LAVA updates, and the release builds.
🌸 Get it here: https://buff.ly/41vJ9vb
iLEAPP v2.0.3 has been released.
Latest updates:
-Updated Photos.sqlite queries by Scott Koening with LAVA support.
-Foursquare Swarm support by Django Faiola
-And more
Get the executables here: https://buff.ly/3UdHDXY
🙏 Thanks again to Johann Polewczyk for his work on making releases available.
Latest updates:
-Updated Photos.sqlite queries by Scott Koening with LAVA support.
-Foursquare Swarm support by Django Faiola
-And more
Get the executables here: https://buff.ly/3UdHDXY
🙏 Thanks again to Johann Polewczyk for his work on making releases available.
January 20, 2025 at 11:15 PM
iLEAPP v2.0.3 has been released.
Latest updates:
-Updated Photos.sqlite queries by Scott Koening with LAVA support.
-Foursquare Swarm support by Django Faiola
-And more
Get the executables here: https://buff.ly/3UdHDXY
🙏 Thanks again to Johann Polewczyk for his work on making releases available.
Latest updates:
-Updated Photos.sqlite queries by Scott Koening with LAVA support.
-Foursquare Swarm support by Django Faiola
-And more
Get the executables here: https://buff.ly/3UdHDXY
🙏 Thanks again to Johann Polewczyk for his work on making releases available.
🤝 Just merged new Apple Unified Log #iOS artifacts to iLEAPP.
🔎 Identify native application execution in the logs with ease.
💡Review how to extract, process, & query the logs here:
abrignoni.blogspot.com/2025/05/extr...
#DigitalForensics #MobileForensics
🔎 Identify native application execution in the logs with ease.
💡Review how to extract, process, & query the logs here:
abrignoni.blogspot.com/2025/05/extr...
#DigitalForensics #MobileForensics
Extraction, Processing, & Querying Apple Unified Logs from an iOS Device
What are Apple Unified Logs and why are they important in my digital forensics examinations? Introduction Unified logs keep pattern of life...
abrignoni.blogspot.com
May 27, 2025 at 2:31 AM
🤝 Just merged new Apple Unified Log #iOS artifacts to iLEAPP.
🔎 Identify native application execution in the logs with ease.
💡Review how to extract, process, & query the logs here:
abrignoni.blogspot.com/2025/05/extr...
#DigitalForensics #MobileForensics
🔎 Identify native application execution in the logs with ease.
💡Review how to extract, process, & query the logs here:
abrignoni.blogspot.com/2025/05/extr...
#DigitalForensics #MobileForensics
New in iLEAPP and ALEAPP: flag AI generated images! 🤖
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
Spotting AI Generated Images in iLEAPP and ALEAPP — LEAPPs Blog
iLEAPP and ALEAPP can now flag AI generated images by reading content provenance two ways, C2PA Content Credentials manifests and the IPTC Digital Source Type in XMP. Pure Python, no new…
leapps.org
July 12, 2026 at 5:57 PM
New in iLEAPP and ALEAPP: flag AI generated images! 🤖
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
All five LEAPPs just went v2026.3.0. LAVA v0.15.0. Same day.
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
August 15, 2026 at 12:29 AM
All five LEAPPs just went v2026.3.0. LAVA v0.15.0. Same day.
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
How to install and run #iLEAPP on your computer or using the Atrio MK II from Arcpoint Forensics.
www.arcpointforensics.com/news-1/ileapp
#DFIR #DigitalForensics #MobileForensics
www.arcpointforensics.com/news-1/ileapp
#DFIR #DigitalForensics #MobileForensics
Decoding iOS Data: A Step-by-Step Guide to Installing and Using iLEAPP — ArcPoint Forensics Main
If you're involved in digital forensics or simply curious about extracting and analyzing data from iOS devices, iLEAPP is an indispensable open-source tool. In this guide, we'll walk you through the…
www.arcpointforensics.com
April 9, 2025 at 2:08 AM
How to install and run #iLEAPP on your computer or using the Atrio MK II from Arcpoint Forensics.
www.arcpointforensics.com/news-1/ileapp
#DFIR #DigitalForensics #MobileForensics
www.arcpointforensics.com/news-1/ileapp
#DFIR #DigitalForensics #MobileForensics
Apple Unified Logs may reveal locks, app launches, connectivity changes, screenshots, navigation, and more.
Updated: acquisition, iLEAPP processing, 132 message predicates, and LAVA/SQLite analysis.
leapps.org/blog-post?po...
#DFIR #iOSForensics
Updated: acquisition, iLEAPP processing, 132 message predicates, and LAVA/SQLite analysis.
leapps.org/blog-post?po...
#DFIR #iOSForensics
Extracting, Processing, and Querying Apple Unified Logs from an iOS Device — LEAPPs Blog
Apple Unified Logs can show locks, app launches, connectivity, navigation, and more. Here is the updated workflow for acquiring them, processing them with iLEAPP, and working the results in LAVA.
leapps.org
July 29, 2026 at 8:36 PM
Apple Unified Logs may reveal locks, app launches, connectivity changes, screenshots, navigation, and more.
Updated: acquisition, iLEAPP processing, 132 message predicates, and LAVA/SQLite analysis.
leapps.org/blog-post?po...
#DFIR #iOSForensics
Updated: acquisition, iLEAPP processing, 132 message predicates, and LAVA/SQLite analysis.
leapps.org/blog-post?po...
#DFIR #iOSForensics
Christian Peter took my small start, ran with it, and found the "finish line". There's always more work to be done, but he did what I intended on doing - completed an open source parser for Potato Chat. Check out his writeup here!
#dfir #ileapp #opensource #python
cp-df.com/en/blog/pota...
#dfir #ileapp #opensource #python
cp-df.com/en/blog/pota...
What's Taters, Precious? - Parsing Potato Chat with iLEAPP
What's Taters, Precious? - Parsing Potato Chat with iLEAPP
cp-df.com
August 23, 2025 at 5:01 AM
Christian Peter took my small start, ran with it, and found the "finish line". There's always more work to be done, but he did what I intended on doing - completed an open source parser for Potato Chat. Check out his writeup here!
#dfir #ileapp #opensource #python
cp-df.com/en/blog/pota...
#dfir #ileapp #opensource #python
cp-df.com/en/blog/pota...
Watch the #DigitalForensics Now Podcast on YouTube live here: youtube.com/@alexisbrign...
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
Alexis Brignoni
Digital forensics and incident response in English and Spanish.
Focus on mobile device forensics both iOS and Android.
Developer or iLEAPP and ALEAPP, tools for parsing mobile device extractions.
Co-...
youtube.com
November 13, 2024 at 12:04 AM
Watch the #DigitalForensics Now Podcast on YouTube live here: youtube.com/@alexisbrign...
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
Every Apple Unified Log predicate iLEAPP searches for, artifact by artifact.
34 artifacts, 230 predicates, each sourced and validated against real iOS extractions. Free, PDF included. #DFIR
leapps.org/blog-post?po...
34 artifacts, 230 predicates, each sourced and validated against real iOS extractions. Free, PDF included. #DFIR
leapps.org/blog-post?po...
Apple Unified Log Predicates in iLEAPP: The Reference — LEAPPs Blog
Every Unified Log message predicate iLEAPP searches for, artifact by artifact, with the processes involved, the iOS versions each pattern was observed on, the sources that documented them, and the cav...
leapps.org
August 2, 2026 at 4:39 AM
Every Apple Unified Log predicate iLEAPP searches for, artifact by artifact.
34 artifacts, 230 predicates, each sourced and validated against real iOS extractions. Free, PDF included. #DFIR
leapps.org/blog-post?po...
34 artifacts, 230 predicates, each sourced and validated against real iOS extractions. Free, PDF included. #DFIR
leapps.org/blog-post?po...
New #iLEAPP artifact for iOS #DigitalForensics: Sync.db
💻 See what Apple devices are under the same account.
📱 Track /Biome/SEGB remote activity to a specific remote device.
🙏 Thanks to Johann POLEWCZYK for keeping the updated Apple model list in iLEAPP.
🔗 Get iLEAPP here: github.com/abrignoni/iL...
💻 See what Apple devices are under the same account.
📱 Track /Biome/SEGB remote activity to a specific remote device.
🙏 Thanks to Johann POLEWCZYK for keeping the updated Apple model list in iLEAPP.
🔗 Get iLEAPP here: github.com/abrignoni/iL...
December 20, 2023 at 7:46 PM
New #iLEAPP artifact for iOS #DigitalForensics: Sync.db
💻 See what Apple devices are under the same account.
📱 Track /Biome/SEGB remote activity to a specific remote device.
🙏 Thanks to Johann POLEWCZYK for keeping the updated Apple model list in iLEAPP.
🔗 Get iLEAPP here: github.com/abrignoni/iL...
💻 See what Apple devices are under the same account.
📱 Track /Biome/SEGB remote activity to a specific remote device.
🙏 Thanks to Johann POLEWCZYK for keeping the updated Apple model list in iLEAPP.
🔗 Get iLEAPP here: github.com/abrignoni/iL...
New parser for the Uber app in iOS using iLEAPP
🗜 Data contained in LevelDB data structures
⏳ Timestamps
📍 GPS coordinates + horizontal accuracy
🚘 Speed
🗺 Active trip information
🔗 Get it here: github.com/abrignoni/iL...
#DFIR #FLOSS #FOSS #MobileForensics #DigitalForensics
🗜 Data contained in LevelDB data structures
⏳ Timestamps
📍 GPS coordinates + horizontal accuracy
🚘 Speed
🗺 Active trip information
🔗 Get it here: github.com/abrignoni/iL...
#DFIR #FLOSS #FOSS #MobileForensics #DigitalForensics
April 9, 2024 at 6:39 PM
New parser for the Uber app in iOS using iLEAPP
🗜 Data contained in LevelDB data structures
⏳ Timestamps
📍 GPS coordinates + horizontal accuracy
🚘 Speed
🗺 Active trip information
🔗 Get it here: github.com/abrignoni/iL...
#DFIR #FLOSS #FOSS #MobileForensics #DigitalForensics
🗜 Data contained in LevelDB data structures
⏳ Timestamps
📍 GPS coordinates + horizontal accuracy
🚘 Speed
🗺 Active trip information
🔗 Get it here: github.com/abrignoni/iL...
#DFIR #FLOSS #FOSS #MobileForensics #DigitalForensics