Tracing Digital Intent: New MacOS Tahoe 26 Artifact Discovered

Palo Alto Unit 42 has discovered a new Biome stream, ‘App.MenuItem,’ in macOS Tahoe 26 that logs specific menu selections made by users. This artifact provides a detailed record of user actions, offering valuable context for forensic investigations, particularly regarding data exfiltration or understanding user workflo…