Quick Look Cache
Overview
Evidence: Quick Look Cache Description: Collect Quick Look Cache Category: System Platform: macOS Short Name: qklc Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No
Background
This collector gathers quick look cache information from the macOS system. This data is essential for understanding system activity, detecting security incidents, and investigating system-related events.## Data Collected
This collector gathers structured data about quick look cache.
Quick Look Cache Data
ID
Primary key (auto-increment)
1
Name
Record name
Example Record
Value
Record value
Example Value
Timestamp
Record timestamp
2023-10-15 14:30:25
Type
Record type
example
Status
Record status
active
UserID
User identifier
user123
Metadata
Additional metadata
{}
Notes
This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.
Last updated
Was this helpful?