OS X Auditor is a free Mac OS X computer forensics tool.
OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze:
It also looks for suspicious keywords in the .plist themselves.
It can verify the reputation of each file on:
It can aggregate all logs from the following directories into a zipball:
Be the first to review this listing!
© 2019 Copyright | DFIR Training