Introduction

Welcome to iLEAPP AI, an enhanced version of the iOS Logs, Events, And Plists Parser (iLEAPP) that integrates advanced AI capabilities to transform your digital forensics workflow. This guide will help you get started with installing, configuring, and using iLEAPP AI for your first investigation.

iLEAPP AI extends the original iLEAPP tool with the following capabilities:

• Natural language analysis of messages and conversations
• Behavioral pattern detection in app usage data
• Intelligent categorization of web browsing history
• Automated timeline generation and correlation
• Enhanced report generation with AI-powered insights
• Secure chain-of-custody tracking

Prerequisites

Before installing iLEAPP AI, ensure your system meets the following requirements:

System Requirements

• Operating System: Windows 10/11, macOS 10.15+, or Linux (Ubuntu 20.04+ recommended)
• Python 3.8 or higher
• RAM: 8GB minimum (16GB recommended)
• Disk Space: 50MB for installation (plus space for case data)
• Internet connection (for cloud-based AI models)

Required API Keys

To use the AI capabilities, you'll need at least one of the following API keys:

• OpenRouter API key (recommended, provides access to multiple models)
• Anthropic API key (for Claude models)
• OpenAI API key (for GPT models)

Alternatively, you can use local models which don't require API keys but have higher system requirements.

Installation

Windows

1. Download the iLEAPP AI package from the downloads page.
2. Extract the ZIP file to your desired location.
3. Open Command Prompt or PowerShell and navigate to the extracted directory:

   cd path\to\ileapp_ai

4. Install the required dependencies:

   pip install -r requirements.txt

5. Run the setup script:

   python setup.py install

macOS

1. Download the iLEAPP AI package from the downloads page.
2. Extract the ZIP file to your desired location.
3. Open Terminal and navigate to the extracted directory:

   cd path/to/ileapp_ai

4. Install the required dependencies:

   pip3 install -r requirements.txt

5. Run the setup script:

   python3 setup.py install

Linux

1. Download the iLEAPP AI package from the downloads page.
2. Extract the ZIP file to your desired location:

   unzip ileapp_ai_complete.zip -d /path/to/destination

3. Navigate to the extracted directory:

   cd /path/to/destination/ileapp_ai

4. Install the required dependencies:

   pip3 install -r requirements.txt

5. Run the setup script:

   python3 setup.py install

Configuration

API Keys

To configure your API keys, you have two options:

Option 1: Environment Variables

Set the following environment variables according to the AI provider you want to use:

# For OpenRouter (recommended)
OPENROUTER_API_KEY=your_openrouter_api_key

# For Anthropic Claude
ANTHROPIC_API_KEY=your_anthropic_api_key

# For OpenAI
OPENAI_API_KEY=your_openai_api_key

Option 2: Configuration File

Create a file named config.json in the iLEAPP AI directory with the following structure:

{
  "api_keys": {
    "openrouter": "your_openrouter_api_key",
    "anthropic": "your_anthropic_api_key",
    "openai": "your_openai_api_key"
  },
  "default_provider": "openrouter",
  "default_model": "anthropic/claude-3-opus-20240229"
}

Model Selection

iLEAPP AI supports multiple AI models through different providers. You can configure your preferred model in the config.json file or through the GUI/CLI interface.

Recommended Models

Provider	Model	Strengths
Anthropic	claude-3-opus	Highest accuracy, best for complex analysis
Anthropic	claude-3-sonnet	Good balance of speed and accuracy
OpenAI	gpt-4o	Excellent pattern recognition
Local	llama-3-70b	Privacy-focused, no data leaves your system

Security Settings

iLEAPP AI includes several security features that can be configured:

• Data Encryption: Enable encryption for sensitive data stored during analysis
• Chain of Custody: Configure automatic logging of all actions for forensic integrity
• API Request Logging: Control how API requests and responses are logged
• Data Retention: Set policies for how long analysis data is retained

These settings can be configured in the config.json file:

{
  "security": {
    "encrypt_data": true,
    "chain_of_custody": true,
    "log_api_requests": true,
    "data_retention_days": 90
  }
}

Your First Analysis

Now that you have installed and configured iLEAPP AI, you're ready to perform your first analysis:

Using the GUI

1. Launch iLEAPP AI by running:

   python ileapp_ai_gui.py

2. In the GUI, select the "AI-Enhanced Analysis" option.
3. Choose your iOS data source (backup, image, or extracted files).
4. Select which artifacts you want to analyze with AI.
5. Configure AI settings (model, depth of analysis, etc.).
6. Click "Start Analysis" to begin the process.
7. Once complete, the enhanced report will open automatically.

Using the CLI

For command-line usage:

python ileapp_ai_cli.py -i /path/to/input -o /path/to/output --ai-enabled --ai-provider openrouter --ai-model anthropic/claude-3-opus-20240229 --artifacts messages,app_usage,browser_history

Next Steps

After completing your first analysis, here are some next steps to explore:

• Check out the Enhanced Features documentation to learn about all the AI capabilities
• Explore the API Reference if you want to integrate iLEAPP AI into your own tools
• Read the Integration Guide to learn how to extend iLEAPP AI with custom analyzers
• Join the community forum to share your experiences and get help from other users