Forensic Artifacts

54 results - showing 1 - 20
1 2 3
1054

Artifacts

Operating System
Mac
 Device and account holder information 
917

Artifacts

Operating System
Mac
iOS account deletion
2753

Artifacts

Operating System
Windows
"With the Advent of XP SP2 when a file1 is downloaded from the internet (i.e. by clicking on a...
Amcache Hot
1775

Artifacts

Operating System
Windows
The Amcache.hve is a registry hive file that is created by Microsoft® Windows® to store the information related to...
2063

Artifacts

Operating System
Windows
"As background, the Application Compatibility Cache is used by the Windows operating system to help identify application compatibility issues...
725

Artifacts

Operating System
Mac
pstirparo/mac4n6 https://github.com/pstirparo/mac4n6 mac4n6 https://www.mac4n6.com/ ...
1

Artifacts

Operating System
Mac
Apple Mail IMAP
675

Artifacts

Operating System
Mac
 Apple Mail POP3 mail boxes 
699

Artifacts

Operating System
Mac
 Attached media 
784

Artifacts

Operating System
Mac
Audit logs
774
MacOS, OSX Autorun locations.
Bam/dam Hot
1020
Windows Background Activity Moderator. "The Background Activity Moderator Driver service is a kernel mode driver. If Background...
834

Artifacts

Operating System
Mac
History of commands entered in the terminal by the user
723

Artifacts

Operating System
Mac
Attached bluetooth devices (Mac OS)
738

Artifacts

Operating System
Mac
Safari bookmarks
882
"Web browsers are the tools for performing different activities on the Internet by users. Users utilize browsers for many...
766

Artifacts

Operating System
Mac
Contacts in address book
Cookies Hot
1028
"Cookies are text files used to give feedback from the user to the server. When performing some actions with...
700

Artifacts

Operating System
Mac
List of user-custom menus; shows what runs when user logs in.
738

Artifacts

Operating System
Mac
/Username/Documents
54 results - showing 1 - 20
1 2 3
Results per page: