AutoMacTC: Automated Mac Forensic Triage Collector


Jai Musunuri  Kshitij Kumar 



From : https://github.com/CrowdStrike/automactc

This is a modular forensic triage collection framework designed to access various forensic artifacts on macOS, parse them, and present them in formats viable for analysis. The output may provide valuable insights for incident response in a macOS environment. Automactc can be run against a live system or dead disk (as a mounted volume.)

List of Sessions