This will be really fun - we’ll share how we reversed a bunch of new MacOS forensic artifacts, including a comprehensive source of shell history. https://twitter.com/nicastronaut/status/1162096339116843009