#13 – Exploring macOS

comment 1
Digital Forensics / Incident Response / Mac Artifacts

Per the recommendation of someone, I took a peek inside the macOS /private/var directory. If you have never examined the contents, I suggest you do.

Screen Shot 2018-06-28 at 22.39.27
/private/var Contents

For example, one of the directories contains logs. Hint: It’s the “log” directory.

Screen Shot 2018-06-28 at 22.44.49
/private/var/log Contents

Over the next few posts, I will explain some of these logs and files for you. Then we will back out of this directory and dive into another. Stay tuned!

1 Comment

  1. Pingback: Week 26 – 2018 – This Week In 4n6

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s