mac_apt

mac_apt is a comprehensive digital forensics tool designed for macOS and iOS that facilitates the extraction and analysis of artifacts from full disk images or live systems. It supports a wide array of data formats and artifacts—including Safari history, system logs, Bluetooth data, and much more—while allowing for cross-platform operation and output in various formats like XLSX and JSONL. Notable features include support for encrypted APFS images, a FAST mode for expedited processing, and the ability to analyze iOS filesystem images through the ios_apt integration.