Stat -q -f '%SB %N' '/Library/LaunchAgents/'*|grep -i 'Oct 24 09:'|grep 2016|sed 's/$/ : Directory modification/' Stat -q -f '%SB %N' '/System/Library/LaunchAgents/'*|grep -i 'Oct 24 09:'|grep 2016|sed 's/$/ : Directory modification/' Stat -q -f '%Sm %N' '/Users/amalard/Library/Containers/'*|grep -i 'Oct 24 09:'|grep 2016|sed 's/$/ : Installed App/'|sortĪdded or modified files (like trojan or malware App) Zegrep -A 1 'Installation' /var/log/install.log|grep -i 'Oct 24 09:'|sed 's/$/ : Installed pkg/'Ĭat /Library/Receipts/ist | grep -A 7 'T09:'|sed 's/$/ : Installed pkg/' System/Library/Frameworks/amework/Frameworks/amework/Support/lsregister -dump | egrep -i 'reg date' -B 25 -A 4 | grep -B 25 -A 4 ' 09:' |sed 's/$/ : Recorded App/' Stat -q -f '%SB %N' '/Users/amalard/Library/Application Support/CrashReporter/'*|grep -i 'Oct 24 09:'|grep 2016|sed 's/$/ : Executed App/'|sort Zegrep 'BOOT_TIME' /var/log/system.log*|grep -i 'Oct 24 09:'|awk ''|sed 's/$/ : Executed App/'|sort  FORENSICS - EVENTS   PROOF OF CONCEPT

Freebox sms mac