🏃🏼‍♀️ Evidence Of Installation And Execution

macOS

/Users/username/.zsh_history look for something like hdiutil mount silenteye-0.4.1b-snowleopard.dmg and sudo cp -R /Volumes/SilentEye/silenteye-0.4.1b-snowleopard_installer.app /Applications. Also, /Users/sneaky/Library/Application Support/com.

Mobile

This is about … .

Windows

There are lot’s of evidence of installation and execution. Based on this data one can prove that the user knew about it or not. Below are the main evidence, tools for analysis and .