All posts filed under: Mac Artifacts

#13 – Exploring macOS

comment 1
Digital Forensics / Incident Response / Mac Artifacts

Per the recommendation of someone, I took a peek inside the macOS /private/var directory. If you have never examined the contents, I suggest you do. For example, one of the directories contains logs. Hint: It’s the “log” directory. Over the next few posts, I will explain some of these logs and files for you. Then we will back out of this directory and dive into another. Stay tuned!