Yogesh Khatri's forensic blog

I noticed an interesting feature in Safari's History database today. Safari tries to interpret every page you visit into a few words, re...

Apple Intelligence, while officially released only in 2024 (a few months ago) for macOS 15.1 (Sequoia) has been around for over a year in be...

This post highlights improvements to the AUTOSTART plugin in  mac_apt . Since macOS 13 (Ventura), Login items and Background tasks are manag...

A long time ago I wrote some code to make NSKeyedArchives (NSKA) human readable, basically de-serializing the data. It was then converted to...

In the last OneDrive blog post , I outlined how the ODL file format is structured. A working version of an ODL parser was also created to re...

Due to the popularity of OneDrive, it has become an important source of evidence in forensics. Last week, Brian Maloney posted about his res...

Gboard - the Google Keyboard, is the default keyboard on Pixel devices, and overall has been installed over a billion times according to the...