Hello Reader,
Last weeks challenge went unanswered, but I know there is a movement towards Mac forensics slowly building in the world. Though most of us are still focused on Windows or Mobile in our daily DFIR endeavors don't let you Mac skills fall to the wayside when you most need them... in the event of an incident. So this week let's make go back to the Mac for another challenge.
The Prize:
Last weeks challenge went unanswered, but I know there is a movement towards Mac forensics slowly building in the world. Though most of us are still focused on Windows or Mobile in our daily DFIR endeavors don't let you Mac skills fall to the wayside when you most need them... in the event of an incident. So this week let's make go back to the Mac for another challenge.
The Prize:
$100 Amazon Giftcard
The Rules:
- You must post your answer before Friday 3/1/19 7PM CST (GMT -5)
- The most complete answer wins
- You are allowed to edit your answer after posting
- If two answers are too similar for one to win, the one with the earlier posting time wins
- Be specific and be thoughtful
- Anonymous entries are allowed, please email them to dcowen@g-cpartners.com. Please state in your email if you would like to be anonymous or not if you win.
- In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post
The Challenge:
On OSX Mojave list all of the Plists that would record a file being interacted with.
Also Read: Elcomsoft IOS Toolkit and IOS 12
Post a Comment