Daily Blog #635: Solution Saturday 3/2/19 - OSX Mojave Plists Challenge Winner

Hello Reader,
This week we have a new winner entering the challenge! Please congratulate Amy Francis for her winning answer!

The Challenge:

On OSX Mojave list all of the Plists that would record a file being interacted with. 

The Winning Answer:

Amy Francis

My answer for the challenge: On OSX Mojave list all of the Plists that would record a file being interacted with.

·         In the folder: com.apple.sharedfilelist

o  com.apple.LSSharedFileList.FavoriteItems.sfl2

o  com.apple.LSSharedFileList.ProjectsItems.sfl2

o  com.apple.LSSharedFileList.RecentApplications.sfl2

o  com.apple.LSSharedFileList.RecentDocuments.sfl2

·         Binary plists for individual applications (e.g. com.apple.iwork.pages.sfl2 and com.ridiculousfish.hexfiend.sfl2) are stored in the folder: com.apple.LSSharedFileList.ApplicationsRecentDocuments

·         com.apple.dock.plist

·         com.apple.launchservices.secure.plist

Also Read: AWS GuardDuty False Positives