Network
Network Artifacts
macOS stores records of network connections including Wi-Fi networks joined, Bluetooth device pairings, VPN configurations, firewall rules, and DNS resolver settings. These artifacts help establish device location history, network-based activity timelines, and security configuration posture.
Categories
- Wi-Fi — Known networks, connection history, geolocation
- Bluetooth — Paired devices, connection history
- VPN Configuration — VPN profiles, servers, authentication
- Firewall — Application Layer Firewall rules and state
- DNS Configuration — Resolver settings, hosts file, search domains