I wrote a short article comparing Mac forensic artifacts to their Windows counterparts over at the iSCERS forum. I give a lot of instructional information in the article, particularly how to find a lot of good information and how to parse property lists (plists) on the Mac. Check it out by clicking here!
No related posts.
