Yogesh Khatri (@swiftforensics)

Results 45 comments of Yogesh Khatri (@swiftforensics)
trafficstars

If you run with python < 3.9, it will still produce the exception, as no action was taken. However, since we now recommend 3.9, I am not inclined to spend...

Looks good, haven't run it yet. Can you operate on the files within, without writing out the entire tar? I've been looking into the backup tar format since 2019 and...

Mark, sqlite writing functionality is already included with the spotlight plugin in [mac_apt](https://github.com/ydkhatri/mac_apt), which you can use on individual store.db files (no need to have entire disk).

Yes, that should be fine. Without the right timesync entries, we cannot provide a date and time for any log event, so it fails to parse. Perhaps later this can...

That should have said **_..path to a file_** instead of **_..path to a directory_**. It will create an object of type **_VirtualFile_** and return it. I will change the description...

Depending on your end usage, you may or may not want to do that. By performing string escapes, you make it less readable but more accurate to the original formatting....

The unified log format evolves with every new iteration of macOS. I will have to do some research here about. About the `Unknown custom data object type` message, this has...

There is a link to the wiki on the Readme.md (frontpage) which contains a page on [Installation ](https://github.com/ydkhatri/mac_apt/wiki/Installation) instructions and requirements. The file you've reference (with the incomplete dependencies) is...

It's on the list of things to do.. :)