ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
Converting Binary Plists
Binary plists are the files that Apple products use to store information. The easiest way to view them is to convert them to XML. Note that binary data in XML plist are converted in base64 and therefore strings in the binary data are not directly visible.
plutil on a Windows PC is stored in:
C:\Program Files (x86)\Common Files\Apple\Apple Application Support
Which can be added to the PATH in Environmental variables so plutil can be run from anywhere
To convert Binary plists to XML run the command:
plutil -convert xml1 file.plist
Or with libplist
plutil -i file.plist > file.xml.plist