Skip to content

Home Guides Artifacts Glossary Tools Search

Home
Contact

Contact

Corrections, questions about a guide or suggestions for an artifact to cover are welcome.

Email: contact@macforensics.app

An independent field reference for macOS digital forensics and incident response.

Explore

Acquisition & Triage
Unified Logs
APFS, Snapshots & FSEvents
User Activity
Execution & Persistence
TCC & Keychain

Site

Guides
Artifacts
Printable cheat sheet
Glossary
Tools
Sitemap
Contact
Privacy
Terms
RSS

© 2026 Mac Forensics. All rights reserved.

Independent educational resource. Not affiliated with, endorsed or sponsored by Apple Inc. Mac, macOS, APFS, Safari and Spotlight are trademarks of Apple Inc.