Tuesday, 31 August 2021

Useful Forensic information in Apple MAC

 If you are a MAC user and looking to see some great information visit the following locations to find more information 


  • To see the History of installed Application cat /Library/Receipts/InstallHistory.plist

  • User Password  ~/Library/Keychains

  • List of Historically connected Wifi Access points  /Library/Preferences/SystemConfiguration/com.apple.airport.preferences

  • Current and historical Bluetooth devices : ~/Library/Preferences/com.apple.BluetoothAudioAgent.plist

  • Recently opened files,appliations and savers ~/Library/Preferences/com.apple.recentitems.plist

No comments:

Http vs Https