mac4n6

KO | EN

gitlite — search

#javascript #react #ai #go #android #rust #deep-learning #linux #docker #nodejs #awesome #awesome-list #openai #open-source

(★ 346)

Collection of forensics artifacts location for Mac OS X and iOS

파일 탐색기

최종 버전 다운로드 (.zip)

- - 20180407-ElCapitan.csv
- - 20150816-Mavericks.csv
  - 20150826-Mavericks.csv
  - 20180403-Mavericks.csv
- 20180914-macOS.csv
- 20180930-macOS.csv
- csv-to-wiki.py
- csv-to-yaml.py
- osx_artifacts_validator.py
- yaml_diff.py
- yaml_sorter.py
- - 20180403-ElCapitan.yaml
- - 20150816-Mavericks.yaml
  - 20150826-Mavericks.yaml
  - 20180403-Mavericks.yaml
- 20180914-macOS.yaml
- 20180930-macOS.yaml
LICENSE
README.md
SANS_DFIR-mac4n6-PStirparo-2014.pdf

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Mac4n6 Group

Interested in Mac OS X and iOS Forensics? We are collecting and maintaining a list of mac4n6 resources.

## Artifacts
The idea is to create one single point of collection for OS X and iOS artifacts location, trying to collect more information for each artifact, not just a path!

The motto? Reusable format. 
The goal is that the information collected have to be “machine parsable” and mostly “human readable/writable”, reusable by any application, library, etc. (am I too optimistic?). That is why as main collaboration tool for the collection, we use a shared spreadsheet so that anyone can add new artifacts, there is no need to know how to code to contribute to this project (so, no excuses!).
From here, two (simple) scripts will convert the csv file into:
* yaml artifact library file, so that other applications can use it. No crapy/fancy xml things.
* ForensicsWiki page, one of the point of reference for forensics practitioners.

This way the effort is centralized and made only once.

### Mac OS X Forensics Artifacts
Here is the shared spreadsheet for the OSX artifacts:
* https://docs.google.com/spreadsheets/d/1X2Hu0NE2ptdRj023OVWIGp5dqZOw-CfxHLOW_GNGpX8/edit#gid=1317205466

Here is the link to the ForensicsWiki page updated from the above spreadsheet
* http://forensicswiki.org/wiki/Mac_OS_X_10.9_-_Artifacts_Location
* https://forensicswiki.org/wiki/Mac_OS_X_10.11_(ElCapitan)_-_Artifacts_Location

### iOS Forensics Artifacts
Here is the shared spreadsheet for the iOS artifacts (way too much initial phase still):
* https://docs.google.com/spreadsheet/ccc?key=0An7-sa0Wh9_TdFVTTWJ3MzZMb2pGWF93RzRLWGd1YlE&usp=sharing

## Mac4n6 Papers and Presentations
Here you find some of the most interesting presentation on Mac OS X and iOS Forensics.
* https://drive.google.com/drive/folders/0B37-sa0Wh9_TdjVSbzRvMEVGQ2c?resourcekey=0-nz5A4RSaxKhFrun3tpTU7w&usp=sharing

## Contribute
If you are interested in contributing, please join us at https://groups.google.com/d/forum/mac4n6

Notice: The information collected will be made available under the Common Creatives 2.5 license http://creativecommons.org/licenses/by-sa/2.5/

mac4n6

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

mac4n6

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README