Kevin J. Ripa presents instructions for extracting Live Acquisition from a working Mac computer. Kevin tested it on Mountain Lion, Mavericks, Yosemite and El Captain. Testing was not on every OS Apple, but it should work on any Mac based on Intel.
Steven Alexander has shared a Safari Plugin Forensics. You can use it for analising com.apple.Safari.plist files. The files contain the tracking which sites were configured to play Flash video.
The researchers found an unusual piece of malware, FruitFly, which infects some Mac computers. FruitFly spies on users through a computer camera, captures images and records keystrokes. There was a second version called FruitFly 2 at the beginning of the year.