ForensicArtifacts / artifacts

Digital Forensics artifact repository
Apache License 2.0
1.06k stars 206 forks source link

Add MacOSTCC #391

Closed tomchop closed 4 years ago

tomchop commented 4 years ago

Adds an artifact definition for Mojave's Transparency, Consent, and Control framework logs.

References:

jipegit commented 4 years ago

Also add /Library/Application Support/com.apple.TCC/MDMOverrides.plist to fetch MDM overrides

joachimmetz commented 4 years ago

@jipegit that sounds like that should be a separate artifact, could send a PR for that?