diff --git a/README.md b/README.md index 8f80802..f201b23 100644 --- a/README.md +++ b/README.md @@ -79,6 +79,7 @@ My curated list of awesome links, resources and tools - [Mounting an APFS image in Linux](http://az4n6.blogspot.com/2018/01/mounting-apfs-image-in-linux.html) - [pstirparo/mac4n6 - Collection of forensics artifacs location for Mac OS X and iOS](https://github.com/pstirparo/mac4n6) - [Reading Notes database on macOS](https://www.swiftforensics.com/2018/02/reading-notes-database-on-macos.html) +- [Staring into the Spotlight](https://blog.doyensec.com/2017/11/15/osx-spotlight.html) - [The Hitchhiker’s Guide to macOS USB Forensics](http://cyberforensicator.com/2017/11/06/the-hitchhikers-guide-to-macos-usb-forensics/) - [There’s Gold In Them There Blobs!](https://www.ciofecaforensics.com/2017/10/13/theres-gold-in-them-there-blobs/)