Home

Awesome

Apple Pattern of Life Lazy Output'er (APOLLO)

v1.4

v1.3

Dependencies

To install simplekml dependencies on macOS:

Usage

python3 apollo.py {gather_macos, gather_ios} <modules directory> <data directory> --ignore <dir>

python3 apollo.py extract -o {csv, sql, sql_json} -p {apple, android, windows, yolo} -v {8,9,10,11,12,13,14,10.13,10.14,10.15,10.16,and9,and10,and11,win10_1803,win10_1809,win10_1903,win10_1909,yolo} -k <modules directory> <data directory>

Output Options (-o)

KMZ Output(-k)

Platform Options (-p)

Version Options (-v)

Getting Errors? Try This (Windows users, use eqivlent commands)

You may see that APOLLO reports back "0 databases" found when executed, most likely from CurrentPowerlog.PLSQL and locationd modules. Two common directories with databases that cause problems due to permissions (depends on how files were extracted from device):

Fix Permissions:

Still not working?

To Do List

Thank You!

References