Difference between revisions of "Mac OS X"

From ForensicsWiki
Jump to: navigation, search
Line 27: Line 27:
* [[Acquiring a MacOS System with Target Disk Mode]]
* [[Acquiring a MacOS System with Target Disk Mode]]
* [[Converting Binary Plists]]
* [[Converting Binary Plists]]
* [[FileVault Disk Encryption]]
== External Links ==
== External Links ==

Revision as of 18:41, 20 June 2012

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Apple Inc.'s Macintosh OS X (pronounced "OS Ten") is the operating system distributed with Apple computers. It includes heavily used several programs by default, including Apple Mail, a web browser called Safari, and an Apple Address Book, and iCal.

Quarantine event database

See [1]

Snow Leopard and earlier

SELECT datetime(LSQuarantineTimeStamp + 978307200, "unixepoch") as LSQuarantineTimeStamp, LSQuarantineAgentName, LSQuarantineOriginURLString, LSQuarantineDataURLString from LSQuarantineEvent;

Lion and later


Package Files (.PKG)

Package Files (.PKG) are XAR archives [2] that contain a cpio archive and metadata [3].

Also see

External Links

Apple Examiner