Quicklook thumbnails.data parser
Earlier this year Mari DeGrazia presented a tool to parse the Quicklook thumbnails index.sqlite file. The file is located under /private/var/folders/<random>/<random>/C/com.apple.QuickLook.thumbnailcache. Now she researched another file in this folder – thumbnails.data. The thing is: popular carvers won’t extract images from it, so she has written a nice Python script for extracting data from it. Also, you can learn more about these files in her blog.