osxcollector
osxcollector copied to clipboard
Consider including /var/db/receipts directory in osxcollector outptut
There is some pretty cool information in /var/db/receipts. Perhaps this would be useful in our malware investigations.
Use lsbom and plutil -convert xml1 to read the contents of the packages that were installed.