Forums
Main Category
General (Technical,...
where does macintos...
 
Notifications
Clear all

where does macintosh keep process records

 
General (Technical, Procedural, Software, Hardware etc.)
Last Post by tirobng 12 years ago
3 Posts
2 Users
0 Reactions
503 Views
RSS
 tirobng
(@tirobng)
New Member
Joined: 12 years ago
Posts: 2
Topic starter 20/01/2014 6:00 pm  

Hi everyone,

Do you know where does mac keep running processes' record ?

Is there a file/list or database file keeps these process names?

In Forensic works for windows prefetch or registery is helpful. What about mac?

thanks guys.


   
Quote
 BitHead
(@bithead)
Noble Member
Joined: 20 years ago
Posts: 1206
20/01/2014 6:25 pm  

In a Mac exam look for a plist.

For example
launchd.plist – System wide and per-user daemon/agent configuration files
https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man5/launchd.plist.5.html

Is that along the lines of what you are looking for?


   
ReplyQuote
 tirobng
(@tirobng)
New Member
Joined: 12 years ago
Posts: 2
Topic starter 21/01/2014 2:54 pm  

this is ok . I will look for the plist file for the application in Mac exam.

thank you.


   
ReplyQuote
Forum Jump:
  Previous Topic
Next Topic  
Share: