macos-collector v1.7.0 Released: The Ultimate Automated DFIR Tool for Apple Endpoints
The new macos-collector v1.7.0 streamlines digital forensics by integrating Jamf's Aftermath, KnockKnock, and TrueTree into a single script. Running it from a USB drive minimizes disk overwrites, while automated triage captures everything from FSEvents to Spotlight databases....