Scripts to process OSX forensic artifacts
Python
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
README.md
Read_OfficeRegDB.py
macNotifications.py

README.md

MacForensics

Repository of scripts for processing various artifacts from OSX.

Script Name Description
Read_OfficeRegDB.py Parse MS Office created sqlite db (microsoftRegistrationDB.reg)
macNotifications.py Parse Mac Notifications db