Hello Reader,
I'm sure a lot of you follow Yogesh Kahtri's research but I wanted to take this post to point our that his MAC Artifact Parsing Tool (MAC APT) continues to be updated. It not only supports parsing full disk image formats (E01, DD, DMG) but it now support APFS.
Combined with the only support for Spotlight indexes outside of Blacklight and you have a pretty amazing open source and free tool that has a plugin framework you could be contributing to if you do OSX investigations.
Want to learn more?
Go Here: https://github.com/ydkhatri/mac_apt
I'm sure a lot of you follow Yogesh Kahtri's research but I wanted to take this post to point our that his MAC Artifact Parsing Tool (MAC APT) continues to be updated. It not only supports parsing full disk image formats (E01, DD, DMG) but it now support APFS.
Combined with the only support for Spotlight indexes outside of Blacklight and you have a pretty amazing open source and free tool that has a plugin framework you could be contributing to if you do OSX investigations.
Want to learn more?
Go Here: https://github.com/ydkhatri/mac_apt
Also Read: Daily Blog #487
Post a Comment