![]() ![]() Reads Word, Excel, Powerpoint and other office MRU/accessed file paths Retrieve configured internet accounts (iCloud, Google, Linkedin, facebook.) Reads and exports connected iDevice details Reads and exports iPhone/iPad backup databases cookies files and ist for each userĪctive Directory Domain(s) that the mac is connected to Read Chrome History, Top Sites, Downloads and Extension info Retrieves programs, daemons, services set to start at boot/loginīasic machine & OS configuration like SN, timezone, computer name, last logged in user, HFS info Reads ARD (Apple Remote Desktop) cached databases about app usage Reads apps & printers installed and/or available for each user from appList.dat ![]() ✔️ AFF4 images (including macquisition created) are supported Available Plugins (artifacts parsed) ✔️ macOS Catalina (10.15+) separately mounted SYSTEM & DATA volumes now supported ✔️ Encrypted □ APFS images can now be processed using password/recovery-key □ ✔️ Introducing ios_apt for processing iOS/ipadOS images ✔️ Support for macOS Big Sur Sealed volumes (11.0) ✔️ ios_apt can read GrayKey extracted file system ✔️ Can read Axiom created targeted collection zip files
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |