Mac agent 10.6 for AD Enterprise 5.6.3 and newer

Overview

Attached is the newest Mac Agent, which supports OS X 10.6-10.10.

Instructions

1. Download and extract the attached ZIP file
2. The "agent-mac10.6.mpkg" is the new Agent, which you install with the instructions here
3. Copy the contents from the extracted "\Mac-Modules 5-6\10.6" folder to the "\AccessData\Forensic Toolkit\5.6\bin\Agent\modules\Mac\10.6" folder on the AD Enterprise Examiner machine, replacing the existing contents

NOTE: For FTK/AD Lab/AD Enterprise versions prior to 6.0, you must first update your Examiner with the steps in this article prior to using this Agent.