Tag Archives: FSEventsParser

FSEventsParser – Parser for OSX/iOS FSEvents Logs

FSEventsParser can be used to parse FSEvents files from the '/.fseventsd/' on a live system or FSEvents files extracted from an image. Carved GZIP files from a macOS volume or a device that was plugged into a macOS system can