DMG File Opened

Overview

Evidence: DMG File Opened Description: Collects previously opened DMG files. Category: System Platform: macOS Short Name: dmgf Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

This collector gathers dmg file opened information from the macOS system. This data is essential for understanding system activity, detecting security incidents, and investigating system-related events.## Data Collected

This collector gathers structured data about dmg file opened.

Dmg File Opened Data

Field	Description	Example
ID	Primary key (auto-increment)	1
Name	Record name	Example Record
Value	Record value	Example Value
Timestamp	Record timestamp	2023-10-15 14:30:25
Type	Record type	example
Status	Record status	active
UserID	User identifier	user123
Metadata	Additional metadata	{}

Notes

This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.