20200426
Changes in this release
- New Plugins - SCREENTIME, QUICKLOOK, TERMINALSTATE, APPLIST, COOKIES
- Compatibility with macOS 10.15 separate System & Data volumes
- New launcher script for processing separate mounted volumes - mac_apt_mounted_sys_data.py
- Better disk space reporting for APFS & HFS
- Added AFF4 support
- FSEVENTS now works for iOS
- BootVolume Spotlight parsing for Catalina
- Add ssh known_hosts to RECENTITEMS
- Add zsh history to BASHSESSIONS
- Added column for recent_app in DOCKITEMS
- Bug Fixes and improvements in SPOTLIGHT, UNIFIEDLOGS
Pre-compiled executables/bundles (no python needed) are available below for Windows
& macOS. For macOS, there is an alternate version (0.5a) compiled with a different libewf(pyewf), use it only if you are having problems with the 0.5 version.
macOS bundles temporarily removed till I figure out a packaging mechanism that actually works!
In the meanwhile, try running from code using the install script. https://github.com/ydkhatri/mac_apt/wiki/Installation-for-Python3.7#macos-osx