www.paragon-software.com/home/apfs-windows/
Apple File System (APFS) is a new file system for macOS, iOS, and other Apple devices. If you work on Windows computer and want to read APFS-formatted HDD, SSD or flash drive, you need APFS for Windows by Paragon Software.
github.com/mac4n6/macMRU-Parser
Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
packagist.org/packages/org_heigl/nskeyedarchiverparser
Parser for Apples NSKeyedArchiver plist files.
pypi.python.org/pypi/plistutils
plistutils provides a number of convenience functions for dealing withApple Property List files.
© 2018 Copyright | DFIR Training