Notifications
Clear all
Topic starter
20/09/2011 5:42 pm
Hi there,
Just been playing around with Mac OS X 10.7 (Lion). I've found with the "Saved Application State" feature (Resume as Apple calls it), I can't seem to make sense of the data saved.
I am looking at a situation where someone has had a terminal session whose state was saved on shutdown and I have the windows.plist, data.data and window_1.data.
Has anyone had any experience with carving data out of these files, some assistance or pointing me in the right direction would be great.
Thanks