Changes to Mac OS article and removed dead references (#230)

forensicswiki · May 18, 2024 · cf74823 · cf74823
1 parent a9065b4
commit cf74823
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 15 deletions.
diff --git a/docs/apple_safari.md b/docs/apple_safari.md
@@ -73,10 +73,6 @@ This file uses the [SQLite database format](sqlite_database_format.md).
 
 ## External Links
 
-* [Safari Cache Revisited](http://www.appleexaminer.com)
-  by Sean Cavanaugh
-* [Analyzing Apple Safari Artifacts](http://www.appleexaminer.com),
-  by Selena Ley
 * [iOS / macOS - Tracking Downloads from Safari Without Downloads](https://blog.d204n6.com/2021/05/ios-macos-tracking-downloads-from.html)
   by Scott Vance, Friday, 28 May 2021
 

diff --git a/docs/blogs.md b/docs/blogs.md
@@ -18,8 +18,6 @@ like: blogs, fora, tweets, tools and challenges (and test images).
   by [Kristinn Guðjónsson](kristinn_gudjonsson.md) and others
 - [Another Forensics Blog](https://az4n6.blogspot.com/),
   by Mari DeGrazia
-- [Apple Examiner](http://www.appleexaminer.com/)
-  by [Eric Zimmerman](eric_zimmerman.md)
 - [BriMor Labs Blog](https://www.brimorlabsblog.com/)
 - [c-skills](https://c-skills.blogspot.com/),
   by Sebastian Krahmer
@@ -100,7 +98,6 @@ like: blogs, fora, tweets, tools and challenges (and test images).
   by Don C. Weber - [Sketchymoose's Blog](https://sketchymoose.blogspot.com/)
 - [TaoSecurity](https://taosecurity.blogspot.com),
   by Richard Bejtlich
-- [The Apple Examiner](http://www.appleexaminer.com/)
 - [The Digital Standard](https://thedigitalstandard.blogspot.com/),
   by Chris Pogue
 - [UNIX, OpenVMS and Windows System Administration, Digital Forensics, High Performance Computing, Clustering and Distributed Systems](http://blog.boreas.ro/),

diff --git a/docs/mac_os_x.md b/docs/mac_os_x.md
@@ -243,7 +243,6 @@ Mac OS.
 * [Wikipedia entry on OS X](https://en.wikipedia.org/wiki/OS_X)
 * [Inside Macintosh](https://developer.apple.com/library/archive/documentation/mac/pdf/Text.pdf),
   by Apple Computer, Inc., 1993
-* [NSKeyedArchiver files – what are they, and how can I use them?](https://digitalinvestigation.wordpress.com/2012/04/04/geek-post-nskeyedarchiver-files-what-are-they-and-how-can-i-use-them/)
 * [Command Line ALF on Mac OS X](https://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/)
 * [mac-security-tips](https://code.google.com/archive/p/mac-security-tips/wikis/ALL_THE_TIPS.wiki)
 * [Hidden backdoor API to root privileges in Apple OS X](https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/),
@@ -253,13 +252,6 @@ Mac OS.
 * [The Boot Loader](https://developer.apple.com/library/archive/documentation/Darwin/Conceptual/KernelProgramming/booting/booting.html),
   by Apple
 
-### Apple Examiner
-
-* [The Apple Examiner](http://www.appleexaminer.com/)
-* [USB Entries on OS X](http://www.appleexaminer.com)
-* [Macintosh Forensics - A Guide for the Forensically Sound Examination of a Macintosh Computer](http://www.appleexaminer.com),
-  by Ryan R. Kubasiak
-
 ### EFI
 
 * [The Intel Mac boot process](https://refit.sourceforge.net/info/boot_process.html), by the
@@ -309,6 +301,16 @@ Mac OS.
 
 * [Quarantine event database](https://menial.co.uk/blog/2011/06/16/mac-quarantine-event-database/)
 
+### NSKeyedArchiver
+
+* [NSKeyedArchiver - An encoder that stores an object’s data to an archive referenced by keys](https://developer.apple.com/documentation/foundation/nskeyedarchiver)
+* [NSKeyedArchiver files – what are they, and how can I use them?](https://digitalinvestigation.wordpress.com/2012/04/04/geek-post-nskeyedarchiver-files-what-are-they-and-how-can-i-use-them/),
+  by Alex Caithness, April 4, 2012
+* [Manual Analysis of ‘NSKeyedArchiver’ Formatted Plist Files - A Review of the NEW OS X 10.11 "Recent Items"](http://www.mac4n6.com/blog/2016/1/1/manual-analysis-of-nskeyedarchiver-formatted-plist-files-a-review-of-the-new-os-x-1011-recent-items),
+  January 01, 2016
+* [How NSCoding and NSKeyedArchiver/Unarchiver Work Together to Encode/Decode Object](https://crystalminds.medium.com/how-nscoding-and-nskeyedarchiver-unarchiver-work-together-to-encode-decode-objects-7f54801ab634),
+  by Mark van Wijnen, August 16, 2022
+
 ### Unified logging
 
 * [New macOS Sierra (10.12) Forensic Artifacts – Introducing Unified Logging](https://www.mac4n6.com/blog/2016/11/13/new-macos-sierra-1012-forensic-artifacts-introducing-unified-logging),