Alias
Alias data on macOS
Applications
Applications on macOS
Authorizations
Authorizations database
Biome
macOS BIOME data
Bill of Materials
macOS bill of materials (BOM)
Bookmarks
Bookmark data on macOS
Codesigning
Codesigning info
Connections
macOS network connections
Cron
Cron jobs on macOS
Dock Tiles
macOS persistence via Dock
Emond
Emond jobs on macOS
ExecPolicy
Application execution tracker
Files
macOS file metadata
Firewall
Applications on macOS
Fsevents
macOS file change tracker
Gatekeeper
macOS Munki application
Groups
macOS groups
Homebrew
Homebrew package manager
Launchd
macOS launch daemons and agents
Loginitems
macOS LoginItems
Logons
macOS Logon events
LuLu Firewall
macOS Lulu application
Macho
The native executable format for macOS
Munki
macOS Munki application
Plist
macOS configuration files
Policies
macOS system policies
Processes
macOS process metadata
Quarantine Events
macOS Quarnatine Event
Recent Files
macOS Recent Files
Safari
The default macOS browser
Shell History
Various shell history metadata
Spotlight
The macOS Spotlight database
SSH
SSH info on macOS
Sudo Logs
macOS sudo records
System Extensions
macOS system extensions
SystemInfo
macOS system information
System Stats
macOS system stats
TCC
Transparency, Consent, and Control database
UnifiedLogs
Primary source of logs on macOS
Users
macOS users
WiFi
macOS WiFi connections
Xprotect
The macOS Antivirus engine