mac4n6 : Collection of forensics artifacs location for Mac OS X and iOS.

mac4n6 : Collection of forensics artifacs location for Mac OS X and iOS.

This is a collection for OS X and iOS artifacts location, trying to collect more information for each artifact, not just a path! From Mac4n6 Group.

The goal is that the information collected have to be “machine parsable” and mostly “human readable/writable”, reusable by any application, library, etc. (am I too optimistic?). That is why as main collaboration tool for the collection, we use a shared spreadsheet so that anyone can add new artifacts, there is no need to know how to code to contribute to this project (so, no excuses!). From here, two (simple) scripts will convert the csv file into:
+ yaml artifact library file, so that other applications can use it. No crapy/fancy xml things.
+ ForensicsWiki page, one of the point of reference for forensics practitioners.
This way the effort is centralized and made only once.

Mac OS X Forensics Artifacts
Here is the shared spreadsheet for the OSX artifacts:
+ https://docs.google.com/spreadsheet/ccc?key=0An7-sa0Wh9_TdGpNQ1gydVo2a3dPbTQtb1AtVzR1bFE&usp=sharing#gid=4

Mac OS X Forensics Artifacts

Mac OS X Forensics Artifacts

Here is the link to the ForensicsWiki page updated from the above spreadsheet
+ http://forensicswiki.org/wiki/Mac_OS_X_10.9_-_Artifacts_Location

iOS Forensics Artifacts
Here is the shared spreadsheet for the iOS artifacts (way too much initial phase still):
+ https://docs.google.com/spreadsheet/ccc?key=0An7-sa0Wh9_TdFVTTWJ3MzZMb2pGWF93RzRLWGd1YlE&usp=sharing

iOS Forensics Artifacts v0.1

iOS Forensics Artifacts v0.1

Download : mac4n6.zip  | Clone Url
Source : https://github.com/pstirparo