Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

iChat Message Parser

This EnScript parses *.ichat messages of the type created by the Mac OS X Messages application.

The script will write its output in the form of bookmarks and individual text files, one per *.ichat file. The latter will be written into a folder of the user's choosing.

Please note that the script only supports plaintext message content; it does not support binary attachments. Emoticons will be visible in the output-files provided they're viewed on a system that supports them, Mac OS X for instance.

Timestamps are interpreted taking into account the TZ settings of the associated evidence file.

This script was developed for use in EnCase training. For more details, please click the following link:

Download Now

Download Now


FAQ

Version: 1
Tested with:
EnCase Forensic 7.1
Developer: Simon Key
Category: Artifact

631 Downloads
80 Downloads in last 6 months