HEART by Metadata Forensics - a free-to-use tool parsing Apple Health and Fitness application data in a forensic manner!
-
Increased support! Now supporting Full File System Extractions, TAR files, some DAR files, Advanced Logical (Encypted) Extractions, and iTunes Encypted Backups!
-
All about the Speed! Version 1.1.0.0 now supports Walking Speed, Running Speed, Stair Speed Up, and Stair Speed Down
-
Easy to install and use application
-
HTML report generation to review Classic Health Artifacts, User Attribution Artifacts, and other Health Artifacts (as supported through input data)
-
36 currently supported artifacts
-
Glossary derived from database information
-
Tables are easy to view and filter thanks to Tabulator
-
CSV / PDF Report generation, based off artifact selection
-
HTML Light and Dark Mode
Application use is as easy as browsing for your input file, browsing to your output location, and selecting "Process"! Processing time will vary based on database size.
HEART by Metadata Forensics output files include the HEART HTML Report and a folder containing Apple Health and Fitness Application databases.
Once processing is complete, selecting "Close" will both exit the application and launch the HTML report. Data is processed to minimize the size of the HTML report as much as possible. Overall HTML report sizes are variable based on input database values and artifacts supported. Initial HTML report loading times will vary as well - based on size of the report.
- Heart Rate
- Steps Taken
- Distance Traveled
- Calories Burned
- Flights Climbed
- Height
- Weight
- Activity
- Cardio Fitness
- Walking Speed
- Running Speed
- Stair Speed Up
- Stair Speed Down
- Blood Oxygen*
- Resting Heart Rate
- Walking Heart Rate Average
- Heart Rate Notifications (Low / High)
- Six-Minute Walk
- Time in Daylight
- All Sleep Data
- Sleep Data by Sleep Period
- Watch Worn Data
- Sleeping Wrist Temp - Vitals
- Sleeping Wrist Temp - Weekly
- Respiratory Rate
- Respiratory Rate - Daily
- Respiratory Rate - Weekly
- Connected Device Information - Device History
- Consolidated Connected Device History
- Device Information - Current Device (New)
- Environmental Sound
- Noise Notifications
- Headphone Audio Levels
- Workouts
- Workouts Location Data
- Workouts Additional Metadata
- Glossary
* A redesigned Blood Oxygen feature was introduced on August 14, 2025, for Apple Watch Series 9, Series 10, and Apple Watch Ultra 2. OS requirements are Apple iPhone iOS 18.6.1 or higher and Apple Watch watchOS 11.6.1 or higher. iOS 26 and watchOS 26 continue to support this feature.
Steps.Taken.mp4
Reviewing out data with Tabulator, we can search and filter in real time with our records count adjusting on the fly. Searching within multiple columns filters the data even further.
Wish the columns were in a different order? Change them! The changes reflect in exported reports as well.
You may also be required to take additional steps when running the tool the first time, through Microsoft Defender SmartScreen. In the Microsoft Defender SmartScreen select "More info" and "Run anyway" to launch the application the first time.
- This software uses the CustomTkinter library, which is licensed under the MIT License. Copyright (c) 2023 Tom Schimansky. The full license text can be found here
- This software uses the Tabulator library, which is licensed under the MIT License. Copyright (c) 2015-2025 Oli Folkerd. The full license text can be found here
- This software uses the Pillow library (PIL fork), licensed under the Historical Permission Notice and Disclaimer (HPND).
- This software uses the iphone_backup_decrypt library, licensed under the MIT License.
We would like to extend our gratitude, and provide reference to, others within our great DFIR Community who have furthered the support of Apple Health and Fitness artifacts, scripts, and more:
-
Sarah Edwards and APOLLO
-
Ian Whiffin and Health Data Types available at DoubleBlak
-
Alexis Brignoni and all who assisted in Health Data within iLEAPP