Mobile Forensics
Mobile Forensics (Español)
Mobile ForensicsMobile Forensics (Español)Análise Forense Rápida (Português)Mobile Forensics (Français)Mobile Forensics (اَلْعَرَبِيَّةُ)
Mobile Forensics (Español)
Mobile ForensicsMobile Forensics (Español)Análise Forense Rápida (Português)Mobile Forensics (Français)Mobile Forensics (اَلْعَرَبِيَّةُ)
  • Introduction
  • Preparations
    • Knowledge
    • Safety
    • Trust
    • Backup
  • Methodology
  • Verificar computadoras con Windows
    • Revisar programas que se ejecutan al encender la computadora
    • Revisar los procesos en ejecución
    • Revisar las conexiones de red
    • Extraer datos para su análisis posterior
  • Checking Mac Computers
    • Review Programs Launching at Startup
    • Review Running Processes
    • Review Kernel Extensions
    • Review Network Connections
    • Review XProtect Logs
    • Extract Data for Further Analysis
  • Verificación de smartphones
    • Nota: temario
    • Estructura del sistema de un smartphone
    • Verificar los dispositivos vinculados a las aplicaciones de mensajería
    • Verificar los mensajes sospechosos
    • Monitorear el tráfico de red
    • Nota: Monitorear el tráfico de red en Linux
  • Checking Android Devices Basic
    • Review Installed Applications
    • Check Storage
    • Check if the Phone is under Android Device Policy
    • Check if the Phone is Rooted
    • Check if Developer Options is Enabled
    • Analyze Applications
    • Extract Data for Further Analysis
    • Optional : Check for Indicators of Stalkerware Installation
  • Checking Android Devices Advanced
    • Wireshark
    • MVT
    • Other Tools
  • Checking iOS Devices
    • Review iCloud Accounts
    • Review Installed Applications
    • Check for Mobile Device Management Profiles
    • Check for Shortcuts
    • Check for Jailbreaks
    • Enable and Check App Privacy Report
    • Extract Data for Further Analysis
    • Analyzing Extracted Data
    • About Lockdown Mode
  • Checking Devices Remotely
    • Mac Computers
    • Android
  • Concluding a Forensic Gathering
  • References and Further Learning
  • License and Credits
Powered by GitBook
On this page

Checking Mac Computers

In this section we will go through some of the basic steps to take when checking a suspected Mac OS computer. Following are the tools (with links to their respective download pages) we are going to demonstrate here:

  • KnockKnock developed by Objective-See

  • TaskExplorer developed by Objective-See

  • KextViewr developed by Objective-See

  • Netiquette developed by Objective-See

  • Objective-See often publishes new tools and they might be helpful as well

  • AutoMacTC developed by CrowdStrike (not updated since 2021, supports up to macOS 11)

PreviousExtraer datos para su análisis posteriorNextReview Programs Launching at Startup