Skip to main content

Get original and actual filename MacOS Photo Library - SQL to link ZASSET with ZADDITIONALASSETATTRIBUTES. -

 

SELECT 
    a.ZDIRECTORY || '/' || a.ZFILENAME LocationOnFileSystem 
    , att.ZORIGINALFILENAME FROM ZADDITIONALASSETATTRIBUTES att
JOIN ZASSET a ON att.ZASSET = a.Z_PK
    -- WHERE att.ZORIGINALFILENAME = 'IMG_0938.JPG'
    WHERE a.ZFILENAME = '6E44872E-FA7C-424A-9136-6B0DC24D7E8F.jpeg'

NB: the photo is located at:
/Users/username/Pictures/Photos Library.photoslibrary/originals

The sqlite file is at:
/Users/username/Pictures/Photos Library.photoslibrary/database/Photos.sqlite


If you want the time, just grab , a.ZDATECREATED
This is the seconds since Monday, 1 January 2001 12:00:00 AM or 
"Apple Cocoa Core Data timestamp"

Comments

Popular posts from this blog

NMAP

It's been about 15 years since I used NMAP, I forgot how useful the tool is. To find out what services are running on an IP address simply use something like nmap -n -v -p1-10000 x.x.x.x -n tells nmap not to do name resolution (saves about 13 seconds if the IP you're scanning isn't in DNS_ -v verbose -p1-10000 says scan ports 1 to 10,000 (otherwise nmap will only scan the first 1000 ports)