Terms of Use

Last updated: September 2026.

Mac Forensics publishes educational material on macOS digital forensics and incident response. By using the site you accept these terms.

Educational use

The guides describe how to collect and analyse evidence on systems you are authorised to examine. Always work within your legal mandate, your organisation's policies and the rules of evidence that apply to your case.

No warranty

macOS changes from release to release. Content is provided as is, without warranty of accuracy or fitness for a particular purpose. Validate every technique on test data and on the exact macOS version you are examining before relying on it.

Trademarks

Mac Forensics is an independent resource and is not affiliated with, endorsed or sponsored by Apple Inc. Mac, macOS, APFS, Safari and Spotlight are trademarks of Apple Inc. Other product names belong to their respective owners.

Reuse

Short quotations with a link back are welcome. Please ask before republishing full guides.