mac_plist_read
Read and parse macOS plist files to extract configuration data. Specify a dot-notation key path to retrieve targeted values for forensic analysis.
Instructions
Read and parse a macOS plist file. Optionally extract specific key path.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key_path | No | Optional dot-notation path (e.g., 'deletedUsers.0.date') | |
| plist_path | Yes | Path to the plist file |