====== Digital Forensics Linux Macos ======

===== Definition =====
Digital Forensics Linux Macos is an index for real forensic concepts in this part of the Anti-Forensics.com wiki.
Use it like a field shelf: start with the concept, read the limits, then follow the related entries when the evidence starts arguing with itself.

===== Articles =====
  * [[wiki:digital_forensics:linux_macos:systemd_journal|systemd Journal]]
  * [[wiki:digital_forensics:linux_macos:linux_auth_logs|Linux Auth Logs]]
  * [[wiki:digital_forensics:linux_macos:linux_auditd|Linux Auditd]]
  * [[wiki:digital_forensics:linux_macos:bash_history|Bash History]]
  * [[wiki:digital_forensics:linux_macos:zsh_history|Zsh History]]
  * [[wiki:digital_forensics:linux_macos:sudo_logs|Sudo Logs]]
  * [[wiki:digital_forensics:linux_macos:ssh_authorized_keys|SSH Authorized Keys]]
  * [[wiki:digital_forensics:linux_macos:ssh_known_hosts|SSH Known Hosts]]
  * [[wiki:digital_forensics:linux_macos:cron_jobs|Cron Jobs]]
  * [[wiki:digital_forensics:linux_macos:systemd_timers|Systemd Timers]]
  * [[wiki:digital_forensics:linux_macos:linux_package_logs|Linux Package Logs]]
  * [[wiki:digital_forensics:linux_macos:file_permissions|File Permissions]]
  * [[wiki:digital_forensics:linux_macos:extended_attributes|Extended Attributes]]
  * [[wiki:digital_forensics:linux_macos:linux_inodes|Linux Inodes]]
  * [[wiki:digital_forensics:linux_macos:macos_unified_logs|macOS Unified Logs]]
  * [[wiki:digital_forensics:linux_macos:fsevents|FSEvents]]
  * [[wiki:digital_forensics:linux_macos:spotlight_metadata|Spotlight Metadata]]
  * [[wiki:digital_forensics:linux_macos:quarantine_events|Quarantine Events]]
  * [[wiki:digital_forensics:linux_macos:gatekeeper|Gatekeeper]]
  * [[wiki:digital_forensics:linux_macos:launchagents|LaunchAgents]]
  * [[wiki:digital_forensics:linux_macos:launchdaemons|LaunchDaemons]]
  * [[wiki:digital_forensics:linux_macos:plist_files|Plist Files]]
  * [[wiki:digital_forensics:linux_macos:keychain_artifacts|Keychain Artifacts]]
  * [[wiki:digital_forensics:linux_macos:time_machine_backups|Time Machine Backups]]
  * [[wiki:digital_forensics:linux_macos:macos_recent_items|macOS Recent Items]]
  * [[wiki:digital_forensics:linux_macos:terminal_history|Terminal History]]
  * [[wiki:digital_forensics:linux_macos:loginwindow_logs|Loginwindow Logs]]
  * [[wiki:digital_forensics:linux_macos:sleep_wake_logs|Sleep Wake Logs]]
  * [[wiki:digital_forensics:linux_macos:apfs_snapshots|APFS Snapshots]]
  * [[wiki:digital_forensics:linux_macos:macos_trash|macOS Trash]]
  * [[wiki:digital_forensics:linux_macos:homebrew_logs|Homebrew Logs]]
  * [[wiki:digital_forensics:linux_macos:linux_trash|Linux Trash]]
  * [[wiki:digital_forensics:linux_macos:user_login_records|User Login Records]]
  * [[wiki:digital_forensics:linux_macos:shell_configuration_files|Shell Configuration Files]]
  * [[wiki:digital_forensics:linux_macos:unix_timestamp_conversion|Unix Timestamp Conversion]]

===== Core Navigation =====
  * [[wiki:start|Main Index]]
  * [[wiki:tools:start|Forensic Tools]]
  * [[wiki:resources:start|Project Resources]]
  * [[wiki:support|Support Anti-Forensics.com]]

===== Use Notes =====
This article is for defensive education and technical reference. It should not be treated as legal, forensic, investigative, compliance, or operational advice without qualified professional judgment.