Section macos

This plugin extracts and analyzes forensic artifacts from a MacOS system.

Jobs

• macforensics: Jobs to be run on a disk image at the beginning

Job macforensics

Jobs to be run on a disk image at the beginning

Jobs

• mount: Mount all partitions of a disk image.
• allocfiles: Generate allocated files in a disk image
• browsers: Parse history, downloads and cookies from most used browsers: Chrome, Firefox, Safari, Edge, InternetExplorer
• fs_timeline: Generate a timeline of a filesystem.

WARNING

This chapter was created automatically using autodoc.sh. Do not modify manually this file.