Posted on

Collecting macOS artifacts with Oxygen Forensic® KeyScout

Sometimes evidence, credentials, or tokens crucial to an investigation are not found on a mobile device, but a Mac. Today, macOS is the primary operating system for Apple’s Mac computers. Within the desktop, laptop, and home computer market, it is the second most widely used desktop OS, after Microsoft Windows. Oxygen Forensic® KeyScout can extract …

Continue reading “Collecting macOS artifacts with Oxygen Forensic® KeyScout”

Posted on

Hunting Computer Artifacts with Oxygen Forensic KeyScout

Oxygen Forensic KeyScout is a portable utility available at no additional charge within Oxygen Forensic Detective software. It allows searching and extracting data from a running computer system using OS API calls and user privileges. You can find the KeyScout utility on the Oxygen Forensic Detective home screen.  Once located investigators simply copy the executable …

Continue reading “Hunting Computer Artifacts with Oxygen Forensic KeyScout”