mac_apt VS apple_cloud_notes_parser

If you are capable of running cli applications macApt is pretty sophisticated and feature rich analysis tool for MacOS. If it doesn’t have the exact feature you need you could extend it to identify activities of this ‘foreign’ software. Full disclosure I contributed to this project by developing the Docker container, and published the work, unpaid.

Here's a Python script that takes the JSON output from https://github.com/threeplanetssoftware/apple_cloud_notes_pa... (needs master), and rebuilds Notes in Markdown format, with links, attachments, lists, etc.:

https://gist.github.com/vszakats/5a3bd939721d1dde6142d9ea3b2...

And simpler, standalone JXA script, that outputs HTML, but loses some data, such as links:

I use this https://github.com/threeplanetssoftware/apple_cloud_notes_pa... and it works extremely well.

A brief googling showed that the encryption is on point, but there are password brute-forcing tools out there, such as this: 1, 2. If you have at least a vague idea of what your password was supposed to be, you can use it to build a password dictionary (again, there should be tools to produce passwords based on an initial wordlist and various permutations, like character substitutions), feed it to a tool like the one above, and wait (maybe a year or two, heh).