macapt

github.com/ydkhatri/mac_apt Desktop & OS Privacy Open-source projectOpen source

Process macOS and iOS disk images or live machines with mac_apt to extract forensic data and metadata.

github.com/ydkhatri/mac_apt
macapt homepage screenshot

About macapt

mac_apt is a Python-based DFIR (Digital Forensics and Incident Response) tool for processing Mac full disk images or live machines. It extracts data and metadata that can support forensic investigation. An included ios_apt component handles iOS images. The project has been tested on Windows and macOS, and it requires Python 3.10 or higher (64 bit).

Pricing is not clearly stated.

Key features

  • Reads common disk image formats such as E01, VMDK, AFF4, DD, SPARSEIMAGE and UAC collections
  • Plugins parse artifacts such as Safari history, keychains, call history and iMessage chats
  • Exports results to XLSX, CSV, TSV, JSONL or SQLite
  • Can process encrypted APFS images with a password or recovery key
  • Windows binaries are offered from the project's releases page
Best for: Forensic investigators who need to extract data from Mac or iOS disk images or live machines.
Good for
  • Open source under the MIT license
Watch out for
  • Needs Python 3.10 or later, 64 bit
  • Listed DMG support covers uncompressed images only

macapt at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Platforms
Windows, macOS
Details verified
Oct 21, 2026 · Official source
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

macapt alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in Desktop & OS Privacy

Well-known listings from the same topic.

All 61
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing