Parsing plist with Apple Plist Viewer
The Oxygen Forensic program has been already described previously in Chapter 1, SIM Cards Acquisition and Analysis. This program contains the Apple Plist Viewer module, which can be used for viewing and analyzing the contents of a plist-file.
How to do it…
- Double-click the Oxygen Forensic icon to start. In the program menu, select
Tools
and thenApple Plist Viewer
:
Apple Plist Viewer startup
- The Windows window will appear; you need to select the plist-file which will be analyzed. In this example, the
History.plist
file was analyzed. After file selection, clickOpen
. - After that, the main window of the Apple Plist Viewer opens, where the result of the selected plist-file will be displayed:
Displaying the analysis result of the plist-file in Classic mode
The viewing of the results is possible in two modes, Classic mode and Simple mode:
Displaying the analysis result of the plist-file in Simple mode
- Switching between the modes can be done by clicking the
View mode...