drop spotlight index stores or plist exports · parse search index artifacts · query history and app indexing records · detect anti-forensic index removal · runs locally
spotlight artifacts
drop CoreSpotlight sqlite · com.apple.Spotlight.plist · text export
or click
drop spotlight sqlite · plist · or text export