Num. 1 is the directory containing user preference settings for applications and utilities
Num. 3 is the plists containing the names of volumes mounted on the desktop that have appeared in the sidebar list
Num. 4 is Global Preferences Plist
Num. 5 contains directories, files, and apps that have appeared in the Dock
Num 6 contains the list of attached iDevices
Num 7 is the SQLite database that keeps track of files that have the quarantine extended attribute that is given to applications, scripts, and executables downloaded from potentially untrustworthy locations/people. The SQLite database contains URLS, email addresses, email subjects, and other potentially useful information.
1) User preferences directory
2) iCloud user preferences
These artefacts are collected under the ma4n6 project, aiming at being single point of collection for OSX artifacts from where such locations are later shared via:
– yaml library
So that the effort is made only once, and the output reused everywhere.