James McGee

KMLer turns CSV and XLSX files into KML files while adding the investigative context examiners and analysts need. 🕵️ Horizontal accuracy visualized, extended data, processing report, and more! Read more here: tinyurl.com/y8d3je3m  Get it here: tinyurl.com/3fw8vnn8

Get it here: github.com/MetadataForens…

🚀 New Release: HEART by Metadata Forensics Version 1.3! 🚀 We’ve added Local Device Time conversions! Because most Apple Health and Fitness application artifacts are linked to the device recorded the event, the associated time zone is preserved as well. Conversions by activity!

Join the free Summit (Feb 23–26) for great DFIR insights: lnkd.in/ew3taAjV Check further work on our blog: lnkd.in/e6HZCBFq And try HEART by Metadata Forensics (Health Events and Reporting Tool—37+ artifacts): lnkd.in/ehvzCCy5

Couldn't start the week better—huge thanks to @cScottVance for the shout-out in his 'Harping on health data' session at #MVS2026 Magnet Virtual Summit! Grateful my Apple Health forensics work was mentioned alongside his Mobile Unpacked series.

Ever wondered what secrets are in your Apple Contacts? 📱 iQueryContacts 🕵️ is our new advanced SQL query work for the AddressBook.sqlitedb. All the classic data plus some new info including the Chinese lunar birthday! Find out more at github.com/MetadataForens…

🧩 RowIDetective 🕵️‍♂️ formerly detailed Lagging for the Win: Querying for Negative Evidence in the sms.db. Now detecting missing messages at the end of Apple sms.db. Because every gap tells a story. 🔗 github.com/MetadataForens…

🚀 New release! HEART by Metadata Forensics (Health Events & Activity Reporting Tool) Version 1.1.0.0! Now supporting TAR, DAR (some), Advanced Logical (Encrypted) Extractions, iTunes Encrypted Backups. ⬇️ Download: tinyurl.com/v8zesb7h 📖 Article: tinyurl.com/94rx6vk4

HEART by Metadata Forensics (Health Events & Activity Reporting Tool) Free tool to parse Apple Health & Fitness data from FFS Extractions. 🔍 31+ artifacts supported 📊 HTML report + CSV/PDF export ⬇️ Download: tinyurl.com/v8zesb7h 📖 Article: tinyurl.com/94rx6vk4

Thanks to our great DFIR Community and discussion on the matter, I’m happy to announce our Google Location History Takeout Parser, Version 1.4.1. We’ve added Horizontal Accuracy KMLs for Records.JSON data and Parking Events. Get it at tinyurl.com/4aua56u4 Google Earth example:

🚀 Google Location History Timeline Parser v 1.4 is now available! This release features multithreaded processing, time elapsed tracking, input file size calculation, and location-related files including HTML, CSV, and TXT. Available here: tinyurl.com/4dr3tuv5

@KevinPagano3 Yes, it’ll have a finalization message in the window and if you check your output location there should be a Data Copy folder, CSV folder, KML folder, and a summary txt file. Is your test data personal data or available to download? Unsure the exact problem that’s happening.

@SQL_McGee New version seems fine, still have no idea if it's finished or not, just has a list of JSON files. Does it have a end message at all?

🚀 Google Location History Takeout Parser Version 1.3.0.0 is here! 🎉 With enhanced KML support (TimeSpans, Descriptions & LineStrings), taking your data to the next level. Continue leveraging Google Location History Takeout & Warrant Return data. 👉 tinyurl.com/2s8yzksx

@KevinPagano3 Oh wow, interesting. I’ve never seen it go above 100MB of RAM. I’ll have to look into that. Thanks!

@SQL_McGee Had noticed massive RAM usage until I just killed it when it got up to 32GB, I’ll keep testing

@KevinPagano3 And thus version 1.3.0.1 came to be. If you can run your data through this new version I’d appreciate it. Thanks for your help and communicating the issue!

@SQL_McGee just opened an issue, let me know if you want me to poke and test further

Excited for this release, best is yet to come with the LEAPPs! Fantastic project, resource, and tool

We’re thrilled to unveil "Legal Bytes in a Digital World," our new article series examining the intersection of law, technology, and digital forensics. In our debut piece, we explore US v. Strong - available here: tinyurl.com/ymn2ju28 Stay tuned for more!

Many thanks to @MagnetForensics, @hexordia, and the CTF authors for this great experience! Glad the timing worked out that I was able to participate - really enjoyable, creative, and challenging. Still may go back and look at some more of these questions..

🔍 New article from Metadata Forensics! 📱 “Hello! Who is on the Line?” – we’re diving into parsing iPhone group calls, something not previously supported by commercial or open-source mobile forensic tools. Check it out 👉 tinyurl.com/3n6c3374