Skip to main content

Posts

Showing posts from March, 2019

Learning Mac Forensics: KnowledgeC is Power

Hello and welcome!   This is my first blog post.  I submitted this for the Sunday Funday challenge by David Cowen .  It is just a beginning of my learning Mac forensics, and I plan to continue doing more.  I would like to express my sincere thanks to Dave for encouraging to learn new things , Sarah for the great research and Phill for guiding me to start this blog.   This is a great community I would like to be and proud to be part of. Daily Blog #636: Sunday Funday 3/3/19 The Challenge: On OSX Mojave , what information can you determine from the KnowledgeC database ? Sarah Edwards has done quite an extensive research on the knowledgeC database and wrote a few posts on her blog mac4n6.com .   I have never used a Mac before and this is a good opportunity to learn Mac forensics.   So, I decided to take the challenge and installed a macOS Mojave in Virtual Box.   As a beginner I simply followed the same testing that Sarah did on macOS 10.13 to see the output of