abrignoni / iLEAPP

iOS Logs, Events, And Plist Parser
MIT License
709 stars 141 forks source link

Add iTunes friendly path to TikTok Parser, and backup db #801

Open JamesHabben opened 3 weeks ago

JamesHabben commented 3 weeks ago

The file search pattern in tikTok.py and tikTokReplied.py are specific to FFS extractions only. We should include a string that allows for iTunes backups to be processed by these modules.

here are the files and properties from an iTunes backup

image

the SQL filter of where relativePath like '%/ChatFiles/%/db.sqlite%' seems to limit the returns sufficiently.

additionally, I see a backup db that could be useful to parse in addition to the main db, maybe in both iTunes and FFS? the existing pattern has a trailing * wildcard so it likely catches anything there, but would two patterns with less wildcard be faster to process than one with wildcards?