Skip to content

macos-collector v1.2.0

Choose a tag to compare

View all tags
@evild3ad evild3ad released this 24 Nov 06:41
v1.2.0
511b3d6

[1.2.0] - 2025-11-24

Added

  • Sysdiagnose Logs Collection
  • BTM Dump File Collection (Background Task Management)
  • DSStore: DMG Creation (read-only)
  • FSEvents: DMG Creation (read-only)
  • Triage Mode: Collect ALL supported macOS Forensic Artifacts
  • KnockKnock (Persistence Enumerator by Objective-See)

01
Fig 1: Help-Message

02
Fig 2: DMG Support

03
Fig 3: Mount DMG w/ Arsenal Image Mounter (Step #1)

04
Fig 4: Mount DMG w/ APFS for Windows by Paragon Software (Step #2)

05
Fig 5: Access to write-protected data w/ preserved Apple extended attributes

Assets 3
Loading