macOS Download Forensics: An Investigation Walkthrough
A synthetic macOS intrusion worked through with Quarantine Parser: timeline, a recovered deleted row, a Gatekeeper rejection and an AppleDouble on USB.
Series
Investigations
1 post in this series. Read them in order or jump to any one.
- macOS Download Forensics: An Investigation Walkthrough
A synthetic macOS intrusion worked through with Quarantine Parser: timeline, a recovered deleted row, a Gatekeeper rejection and an AppleDouble on USB.