JJebitokinsharonjebitok.com·Mar 14 · 51 min readmacOS Forensics: Artefacts (TryHackMe)This writeup covers a macOS Forensics: Artefacts challenge on TryHackMe involving the analysis of a 25GB disk image from a macOS 15.1.1 (Sequoia) system. The investigation required extracting user act00
