-
Notifications
You must be signed in to change notification settings - Fork 103
BASICINFO
Adam edited this page May 16, 2018
·
6 revisions
The BASICINFO plugin collects information relating to partitions located from the image. It provides partition sizes, names, types, offsets, and what partitions contain macOS.
This plugin does not support standalone mode.
$ python mac-apt.py -x -o ~/Case_Output E01 ~/Acquisition.E01 BASICINFO
Field Name | Notes |
---|---|
INFO_TYPE | - |
Name | - |
Data | - |
Description | - |
Source | - |
Getting Started
- Introduction
- Installation
-
Sample Usage
- ios_apt
- Artifact Only Mode
- Mounted System Data Mode
- Interpreting Output
- Issues & Workarounds
Plugins
- AUTOSTART
- BASICINFO
- BLUETOOTH
- DOMAINS
- FSEVENTS
- IDEVICEBACKUPS
- IDEVICEINFO
- IMESSAGE
- INETACCOUNTS
- INSTALLHISTORY
- MSOFFICE
- NETUSAGE
- NETWORKING
- NOTES
- NOTIFICATIONS
- PRINTJOBS
- QUARANTINE
- RECENTITEMS
- SAFARI
- SCREENTIME
- SPOTLIGHT
- SPOTLIGHTSHORTCUTS
- TERMINALSTATE
- TERMSESSIONS
- UNIFIEDLOGS
- USERS
- WIFI
Development
- Write a Plugin
- Plugin Helpers