Difference between revisions of "Mac OS X"

From ForensicsWiki
Jump to: navigation, search
(Quarantine event database)
(Quarantine event database)
Line 6: Line 6:
 
See [http://menial.co.uk/blog/2011/06/16/mac-quarantine-event-database/]
 
See [http://menial.co.uk/blog/2011/06/16/mac-quarantine-event-database/]
  
 +
Snow Leopard and earlier
 
<pre>
 
<pre>
 
/Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEvents
 
/Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEvents
 +
</pre>
 +
 +
Lion and later
 +
<pre>
 +
/Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2
 
</pre>
 
</pre>
  

Revision as of 07:21, 8 June 2012

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Apple Inc.'s Macintosh OS X (pronounced "OS Ten") is the operating system distributed with Apple computers. It includes heavily used several programs by default, including Apple Mail, a web browser called Safari, and an Apple Address Book, and iCal.

Quarantine event database

See [1]

Snow Leopard and earlier

/Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEvents

Lion and later

/Users/$USER/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2

Package Files (.PKG)

Package Files (.PKG) are XAR archives [2] that contain a cpio archive and metadata [3].

Also see

External Links