cyberstars / tools / mac-apt
mac_apt
—macOS and iOS forensic artifact parser
Voir sur GitHub
PythonMIT
DFIR framework that processes full-disk images, mounted volumes or live macOS/iOS machines and extracts forensically useful data and metadata. Ships dozens of plugins for artifacts such as unified logs, spotlight, Safari history, biome, quarantine and user activity, exporting results to SQLite, CSV and other formats.