-
Notifications
You must be signed in to change notification settings - Fork 103
BASICINFO
Yogesh Khatri (@swiftforensics) edited this page May 17, 2018
·
6 revisions
The BASICINFO plugin collects basic Operating system, hardware and file system details relating from the image. It provides partition sizes, names, types, offsets, and what partitions contain macOS.
This plugin does not support standalone mode.
$ python mac-apt.py -x -o ~/Case_Output E01 ~/Acquisition.E01 BASICINFO
Getting Started
- Introduction
- Installation
-
Sample Usage
- ios_apt
- Artifact Only Mode
- Mounted System Data Mode
- Interpreting Output
- Issues & Workarounds
Plugins
- AUTOSTART
- BASICINFO
- BLUETOOTH
- DOMAINS
- FSEVENTS
- IDEVICEBACKUPS
- IDEVICEINFO
- IMESSAGE
- INETACCOUNTS
- INSTALLHISTORY
- MSOFFICE
- NETUSAGE
- NETWORKING
- NOTES
- NOTIFICATIONS
- PRINTJOBS
- QUARANTINE
- RECENTITEMS
- SAFARI
- SCREENTIME
- SPOTLIGHT
- SPOTLIGHTSHORTCUTS
- TERMINALSTATE
- TERMSESSIONS
- UNIFIEDLOGS
- USERS
- WIFI
Development
- Write a Plugin
- Plugin Helpers