That is why as main collaboration tool for the collection, we use a shared spreadsheet so that anyone can add new artifacts, there is no need to know how to code to contribute to this project (so, no excuses!).įrom here, two (simple) scripts will convert the csv file into:
The goal is that the information collected have to be “machine parsable” and mostly “human readable/writable”, reusable by any application, library, etc. The idea is to create one single point of collection for OS X and iOS artifacts location, trying to collect more information for each artifact, not just a path!
Interested in Mac OS X and iOS Forensics? We are collecting and maintaining a list of mac4n6 resources.