🍎 Apple Intelligence Report Parser

Tool by Bhargav Rathod (malwr4n6)

An open-source forensic parser for Apple Intelligence Report JSON files. Extracts AI interaction data from JSON file extracted from iOS, iPadOS, and macOS devices and produces clean, human-readable output suitable for digital forensic analysis.

---

📋 Table of Contents

• Features
• Prerequisites
• Installation
• Usage
• Input Format
• Output Files
• Output Columns
• Platform Detection
• HTML Features
• Screenshots
• How It Works
• Supported Use Cases

---

✨ Features

• Parses Apple Intelligence Report JSON files exported from iOS/iPadOS/macOS devices
• Extracts critical forensic context automatically:
  • User Trigger — What action the user performed (Summarize, Compose, List, Key Points, Knowledge, Visual Intelligence, Image Generation, etc.)
  • Source Application — Which app initiated the AI request (Siri, Writing Tools, Photos, Safari, Mail, etc.)
  • Request — The user's prompt or input text
  • Response — The exact AI-generated output text
• Customizable Timezones — Both UTC and local time for every record. Local time defaults to your system timezone, or you can specify a custom UTC offset.
• Dynamic Output Naming — Output files automatically inherit the name of your input file.
• Platform detection — Automatically identifies if the report came from iOS/iPadOS or macOS
• Three output formats — CSV, TXT, and interactive HTML
• Interactive HTML report with:
  • Per-column filters (text search, datetime picker, dropdowns)
  • Sortable columns
  • Row selection with copy-to-clipboard
  • Color-coded trigger badges
  • Full text display (no truncation)
• Parses both sections of the report:
  • modelRequests — Direct AI model interactions
  • privateCloudComputeRequests — Apple Private Cloud Compute (PCC) requests
• Zero external dependencies — Uses only Python standard library

---

📦 Prerequisites

Requirement	Version	Notes
Python	3.7+	Standard CPython distribution

Dependencies

None! This tool uses only Python standard library modules:

• json, csv, re, os, sys, argparse, html, datetime, collections

No pip install required.

---

🚀 Installation

Option 1: Clone the repository

git clone https://github.com/malwr4n6/apple-intelligence-parser.git
cd apple-intelligence-parser

Option 2: Download the script directly

curl -O https://raw.githubusercontent.com/malwr4n6/apple-intelligence-parser/main/parse_apple_intelligence.py

Option 3: Copy the single file

Simply copy parse_apple_intelligence.py to your working directory. That's it — no installation needed.

---

🔧 Usage

The tool requires an input JSON file to run.

Basic usage

python3 parse_apple_intelligence.py <input_file.json>

Advanced usage (Custom Timezones)

By default, the script calculates the "Local Time" column using your host machine's system timezone. You can override this to match the timezone of the device you are analyzing using the --tz flag, providing the offset from UTC in hours.

# Parse report in Indian Standard Time (UTC+5.5)
python3 parse_apple_intelligence.py report.json --tz 5.5

# Parse report in Eastern Daylight Time (UTC-4)
python3 parse_apple_intelligence.py report.json --tz -4

Examples

# Parse a report from a specific case
python3 parse_apple_intelligence.py ~/Cases/Case001/AI_Report_Device_A.json

# Parse with full path and specific timezone (Pacific Time UTC-8)
python3 parse_apple_intelligence.py /Volumes/Evidence/AI_Report.json --tz -8