This EnScript parses *.ichat messages of the type created by the Mac OS X Messages application.

The script will write its output in the form of bookmarks and individual text files, one per *.ichat file. The latter will be written into a folder of the user's choosing.

Please note that the script only supports plaintext message content; it does not support binary attachments. Emoticons will be visible in the output-files provided they're viewed on a system that supports them, Mac OS X for instance.

Timestamps are interpreted taking into account the TZ settings of the associated evidence file.

This script was developed for use in EnCase training. For more details, please click the following link:

• OpenText EnCase Training