mac_apt

mac_apt copied to clipboard

Fixed lzvn error

2

mnrkbys

"lzvn error" has been occurred in AUTOSTART plugin when analyzing a M1 Mac disk image

7

Hi, @ydkhatri, I am trying to analyze an M1 Mac (macOS 12.5) disk image created by Digital Collector (former MacQuisition). While AUTOSTART plugin is running, I get the following error...

mnrkbys

Feature Request: Zip folder support for ios_apt

4

I have no idea how difficult it would be but would love to see it, as we see more FFS extractions.

stark4n6

Illegal hardware instruction on MacOS CATALINA

4

Hi, I've installed mac_apt on my MacBook Pro (mid-2010) with MacOS CATALINA (10.15.4) without any problem. Then, I execute the following command and I get this message "ZSH: Illegal hardware...

kr4n6

tons of "item_type unknown (0xF2)" and "Unknown custom data object type" occur while processing Unified Logs

1

The warning and info messages like below are displayed, if I analyze unified logs of macOS 10.6. ``` 2021-09-29 11:29:09|MAIN.UNIFIED_LOG_READER_LIB|INFO|Unknown custom data object type '{public,mdns:dnshdr}' data size=0xC in log @...

mnrkbys

Please use squash merge when merging

joachimmetz

Allow bulk analysis of UTMPX files

1

I think it'd be beneficial to add capability to bulk analyze UTMPX files when given a folder instead of a filepath. I can probably implement this when I get back...

jfarley248

Please add requirements.txt

9

While running mac_apt.py from git clone `ImportError: No module named kaitaistruct` Please add a requirements.txt file that contains information about dependencies. only reference I found regarding "dependencies" was https://github.com/ydkhatri/mac_apt/blob/27302315b6d6f3f8b43c35823664e36509270049/plugins/helpers/spotlight_parser.py#L22

joachimmetz

Get file created (birth) time on linux

2

Currently modified time is passed as created/birth time because of python's limitation (dependency on stat). This issue only affects running mac_apt in MOUNTED mode when the platform is linux. The...

ydkhatri

exported Notes lose formatting

12

Exported notes contain only the plain text content of the notes, losing any rich text formatting. The formatting information seems to be stored separately from the text that it applies...

bshannon