ForensicChef — mobile forensics and data transformation toolkit
Quickly import, inspect, transform and export forensic captures and text data on your iPhone or iPad. Build repeatable “recipes” of operations to automate parsing, decoding, filtering and formatting so you can reproduce results reliably and share findings with colleagues.
Key features
- Import from files or clipboard: accept raw capture files and text (PCAP, base64/hex dumps, CSV, JSON and plain text) via the Share sheet or clipboard.
- Reusable recipes: chain operations (parse, filter, decode, extract, format) into named recipes that you can save, run and modify.
- Lightweight operations: common forensic helpers such as hex/base64 decode, timestamp conversion, field extraction, regex search/replace, and CSV/JSON formatting.
- Secure local exports: export results to local files for secure sharing or archival; temporary-file export ensures reliable access for the system share sheet.
- Share & handoff: integrate with other tools using the share extension or URL/pasteboard fallback for automated workflows.
- Reproducibility: save, export and version recipes so analyses can be repeated and audited.
- Privacy-first: all processing occurs locally on-device; nothing is uploaded without your explicit action.
Who it’s for
- Mobile forensics practitioners who need a portable tool for quick parsing and triage.
- Security analysts and incident responders who want reproducible, shareable transformations of capture or text artifacts.
- Developers and researchers who need a compact playground for testing parsing and data-extraction logic.
Getting started
- Paste or import a capture/text into the Input.
- Add operations from the picker and arrange them into a recipe.
- Run the recipe to produce transformed Output.
- Export or share results securely when needed.
Support & contributions
For help, issues, or to contribute recipes and operations, check the project repository bundled with the app or contact the developer via the app’s help screen.
Download ForensicChef to speed up mobile forensic triage, keep analyses reproducible, and share results securely — all from your device.