macOS Forensics: Artefacts (TryHackMe)

13h ago · 51 min read · This writeup covers a macOS Forensics: Artefacts challenge on TryHackMe involving the analysis of a 25GB disk image from a macOS 15.1.1 (Sequoia) system. The investigation required extracting user act