Kevin J. Ripa presents instructions for extracting Live Acquisition from a working Mac computer. Kevin tested it on Mountain Lion, Mavericks, Yosemite and El Captain. Testing was not on every OS Apple, but it should work on any Mac based on Intel.
Steven Alexander has shared a Safari Plugin Forensics. You can use it for analising com.apple.Safari.plist files. The files contain the tracking which sites were configured to play Flash video.
The researchers found an unusual piece of malware, FruitFly, which infects some Mac computers. FruitFly spies on users through a computer camera, captures images and records keystrokes. There was a second version called FruitFly 2 at the beginning of the year.
In 34th episode of the Digital Forensic Survival Podcast Michael Leclair talks about his favourite tools for OS X forensics. He presents a wide list of forensic tools, which can be used for solving common problems, such as imaging, file analysis, data carving, decryption, email analysis, etc.