https://cpus.me/tags/dfir/ Recent content in Dfir on cpus.me Hugo en-us Sun, 09 Nov 2025 13:58:41 +0100 https://cpus.me/2025/macos-powerlogs-1/ Sun, 09 Nov 2025 13:58:41 +0100 https://cpus.me/2025/macos-powerlogs-1/ <h2 id="intro">Intro</h2> <p>Hi there!</p> <p>As I mentioned in my previous post - <a href="https://cpus.me/2025/latest-goodies-10-1/">Latest goodies October #1</a> - there were a few interesting presentations at <a href="https://youtube.com/playlist?list=PLliknDIoYszveXp7vp2RuL5wa-MaxkCzc&amp;si=JBLcCi-Q_SxnHrwB">OBTS v8.0</a> which motivated me to learn more about macOS and *OS platforms. One of the most interesting ones was <a href="https://www.youtube.com/watch?v=dLEZgIwjcPY">Sarah Edwards&rsquo;s - The Power of Powerlogs</a>. All presentations, slides and videos are on <a href="https://objectivebythesea.org/v8/talks.html">OBTS - Talks</a> page. I was aware of macOS&rsquo; powerlogs (most probably from Sarah&rsquo;s blog), however I never spent time investigating them in detail and learning about their structure. This time it seems like a good opportunity to do so.</p>