diff --git a/docs/apple_safari.md b/docs/apple_safari.md index 999266bd1..508c49d31 100644 --- a/docs/apple_safari.md +++ b/docs/apple_safari.md @@ -73,10 +73,6 @@ This file uses the [SQLite database format](sqlite_database_format.md). ## External Links -* [Safari Cache Revisited](http://www.appleexaminer.com) - by Sean Cavanaugh -* [Analyzing Apple Safari Artifacts](http://www.appleexaminer.com), - by Selena Ley * [iOS / macOS - Tracking Downloads from Safari Without Downloads](https://blog.d204n6.com/2021/05/ios-macos-tracking-downloads-from.html) by Scott Vance, Friday, 28 May 2021 diff --git a/docs/blogs.md b/docs/blogs.md index 27ab15d6c..315102b0a 100644 --- a/docs/blogs.md +++ b/docs/blogs.md @@ -18,8 +18,6 @@ like: blogs, fora, tweets, tools and challenges (and test images). by [Kristinn Guðjónsson](kristinn_gudjonsson.md) and others - [Another Forensics Blog](https://az4n6.blogspot.com/), by Mari DeGrazia -- [Apple Examiner](http://www.appleexaminer.com/) - by [Eric Zimmerman](eric_zimmerman.md) - [BriMor Labs Blog](https://www.brimorlabsblog.com/) - [c-skills](https://c-skills.blogspot.com/), by Sebastian Krahmer @@ -100,7 +98,6 @@ like: blogs, fora, tweets, tools and challenges (and test images). by Don C. Weber - [Sketchymoose's Blog](https://sketchymoose.blogspot.com/) - [TaoSecurity](https://taosecurity.blogspot.com), by Richard Bejtlich -- [The Apple Examiner](http://www.appleexaminer.com/) - [The Digital Standard](https://thedigitalstandard.blogspot.com/), by Chris Pogue - [UNIX, OpenVMS and Windows System Administration, Digital Forensics, High Performance Computing, Clustering and Distributed Systems](http://blog.boreas.ro/), diff --git a/docs/mac_os_x.md b/docs/mac_os_x.md index a0a06b689..0f138adf9 100644 --- a/docs/mac_os_x.md +++ b/docs/mac_os_x.md @@ -243,7 +243,6 @@ Mac OS. * [Wikipedia entry on OS X](https://en.wikipedia.org/wiki/OS_X) * [Inside Macintosh](https://developer.apple.com/library/archive/documentation/mac/pdf/Text.pdf), by Apple Computer, Inc., 1993 -* [NSKeyedArchiver files – what are they, and how can I use them?](https://digitalinvestigation.wordpress.com/2012/04/04/geek-post-nskeyedarchiver-files-what-are-they-and-how-can-i-use-them/) * [Command Line ALF on Mac OS X](https://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/) * [mac-security-tips](https://code.google.com/archive/p/mac-security-tips/wikis/ALL_THE_TIPS.wiki) * [Hidden backdoor API to root privileges in Apple OS X](https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/), @@ -253,13 +252,6 @@ Mac OS. * [The Boot Loader](https://developer.apple.com/library/archive/documentation/Darwin/Conceptual/KernelProgramming/booting/booting.html), by Apple -### Apple Examiner - -* [The Apple Examiner](http://www.appleexaminer.com/) -* [USB Entries on OS X](http://www.appleexaminer.com) -* [Macintosh Forensics - A Guide for the Forensically Sound Examination of a Macintosh Computer](http://www.appleexaminer.com), - by Ryan R. Kubasiak - ### EFI * [The Intel Mac boot process](https://refit.sourceforge.net/info/boot_process.html), by the @@ -309,6 +301,16 @@ Mac OS. * [Quarantine event database](https://menial.co.uk/blog/2011/06/16/mac-quarantine-event-database/) +### NSKeyedArchiver + +* [NSKeyedArchiver - An encoder that stores an object’s data to an archive referenced by keys](https://developer.apple.com/documentation/foundation/nskeyedarchiver) +* [NSKeyedArchiver files – what are they, and how can I use them?](https://digitalinvestigation.wordpress.com/2012/04/04/geek-post-nskeyedarchiver-files-what-are-they-and-how-can-i-use-them/), + by Alex Caithness, April 4, 2012 +* [Manual Analysis of ‘NSKeyedArchiver’ Formatted Plist Files - A Review of the NEW OS X 10.11 "Recent Items"](http://www.mac4n6.com/blog/2016/1/1/manual-analysis-of-nskeyedarchiver-formatted-plist-files-a-review-of-the-new-os-x-1011-recent-items), + January 01, 2016 +* [How NSCoding and NSKeyedArchiver/Unarchiver Work Together to Encode/Decode Object](https://crystalminds.medium.com/how-nscoding-and-nskeyedarchiver-unarchiver-work-together-to-encode-decode-objects-7f54801ab634), + by Mark van Wijnen, August 16, 2022 + ### Unified logging * [New macOS Sierra (10.12) Forensic Artifacts – Introducing Unified Logging](https://www.mac4n6.com/blog/2016/11/13/new-macos-sierra-1012-forensic-artifacts-introducing-unified-logging),