Hi,

If you select the entries of interest you should be able you export file details using the application menu (aka hamburger) on the side of the table.

From there you can create an export (TSV ...

Hi,

Try the following: /private/var/db/dhcpclient/leases

Regards

Hi

To re-iterate other posters, I would test this for yourself with the options you mention (File Explorer double click and right click Open With)

A tool such as ESEDatabaseViewer from Nirsoft ...

Hi,

Can you confirm what you mean by [i]"Endpoint Investigator (and won't support macOS Catalina 10.15)"[/I]

If you are talking about Agent deployment and running on the Mac endpoint for remote ...

There is only a Windows version of EnCase.
It is has the ability and functionality to parse multiple file systems (other than NTFS, FAT, ExFAT) including EXT2,3, and 4
If you have taken a DD image y ...

EnCase has a few methods to acquire an evidence file of a live system:

1) EnCase Portable can be configured to acquire a physical device into an EX01 or an E01

2) In “Program Files\EnCase8” ...

Do you have access to any other forensic tools such as EnCase or FTK? Both of these will include the ability to parse internet browser related artifacts.
Alternatives, could be
1) Net Analysis by ...