Pro plugin

Contacts (AddressBook)

Collects contact records, phone numbers, email addresses, change history, and photos from macOS AddressBook

contacts.addressbookPromacOS 10.12+v1.0.0contactsusercommunication

Run this plugin

Trigger collection for Contacts (AddressBook) on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin contacts.addressbook --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin contacts.addressbook --dry-run

Compatibility

  • macOS 10.12+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Artifacts (2 collected, 4 planned)

Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optionalartifacts are often absent, and their absence isn't recorded as an error. Plannedartifacts are documented locations the plugin doesn't collect yet. Where a path shows a version range, macfor only tries it when the source's macOS or application version is in that range.

contacts

ArtifactFormatPathNotes
Main AddressBook Database
addressbook_main
sqlite~/Library/Application Support/AddressBook/AddressBook-v22.abcddb—
Per-Source Databases
addressbook_sourcesOptional
sqlite~/Library/Application Support/AddressBook/Sources/*/AddressBook-v22.abcddb—
Siri Contact Suggestions
siri_changelogPlanned — not collected yetOptionallow value
sqlite~/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddbmacOS 10.13+—

media

ArtifactFormatPathNotes
Contact Photos
contact_photosPlanned — not collected yetOptionalmedium value
binary~/Library/Application Support/AddressBook/Sources/*/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA/*—

config

ArtifactFormatPathNotes
Contacts Preferences
preferencesPlanned — not collected yetOptionallow value
binary_plist~/Library/Preferences/com.apple.AddressBook.plist—

metadata

ArtifactFormatPathNotes
Database Info
database_infoPlanned — not collected yetOptional
binary_plist~/Library/Application Support/AddressBook/Configuration.plist—