Mac Password - Crea...
 
Notifications
Clear all

Mac Password - Creation dates?

2 Posts
1 Users
0 Reactions
669 Views
(@fuzed)
Trusted Member
Joined: 17 years ago
Posts: 93
Topic starter   [#5821]

anyone have any ideas where this info could be found, or any resource pointing to it… I've been examining the var logs and plist's but nothing as of yet…



   
Quote
(@fuzed)
Trusted Member
Joined: 17 years ago
Posts: 93
Topic starter  

found - thanks )
\private\var\db\shadow\hash

holds the salted hashes - of the UUID for the user account, so the more accounts the more the hashes, there will also be a {UUID}.state file that holds the creation date, but this seems to be impossible to pull dates out of unless I log into a copy of the machine (vm or something) and take su control of the file…

useful info here - http//www.appleexaminer.com/MacsAndOS/Analysis/Passwords/passwords.html



   
ReplyQuote
Share: