📄️ Alias
Alias data on macOS
📄️ Applications
Applications on macOS
📄️ Biome
macOS BIOME data
📄️ Bill of Materials
macOS bill of materials (BOM)
📄️ Bookmarks
Bookmark data on macOS
📄️ Codesigning
Codesigning info
📄️ Cron
Cron jobs on macOS
📄️ Dock Tiles
macOS persistence via Dock
📄️ Emond
Emond jobs on macOS
📄️ ExecPolicy
Application execution tracker
📄️ Files
macOS file metadata
📄️ Firewall
Applications on macOS
📄️ Fsevents
macOS file change tracker
📄️ Gatekeeper
macOS Munki application
📄️ Groups
macOS groups
📄️ Homebrew
Homebrew package manager
📄️ Launchd
macOS launch daemons and agents
📄️ Loginitems
macOS LoginItems
📄️ Logons
macOS Logon events
📄️ LuLu Firewall
macOS Lulu application
📄️ Macho
The native executable format for macOS
📄️ Munki
macOS Munki application
📄️ Plist
macOS configuration files
📄️ Policies
macOS system policies
📄️ Processes
macOS process metadata
📄️ Quarantine Events
macOS Quarnatine Event
📄️ Shell History
Various shell history metadata
📄️ Spotlight
The macOS Spotlight database
📄️ Sudo Logs
macOS sudo records
📄️ System Extensions
macOS system extensions
📄️ SystemInfo
macOS system information
📄️ TCC
Transparency, Consent, and Control database
📄️ UnifiedLogs
Primary source of logs on macOS
📄️ Users
macOS users
📄️ WiFi
macOS WiFi connections
📄️ Xprotect
The macOS Antivirus engine