sootmark-macos v0.1.0 — macOS artifacts kept in SQLite databases, for forensics: where downloaded files came from (QuarantineEventsV2), which apps were granted the camera, screen or disk (TCC.db), and

Sign in to join the discussion — your thebay.events account works here.