Pro plugin

Contacts (AddressBook)

Collects contact records, phone numbers, email addresses, change history, and photos from macOS AddressBook

contacts.addressbookPromacOS 10.12+v1.0.0contactsusercommunication

Run this plugin

Trigger collection for Contacts (AddressBook) on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin contacts.addressbook --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin contacts.addressbook --dry-run

Compatibility

  • macOS 10.12+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Artifacts collected (6)

Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optional artifacts are skipped unless explicitly enabled.

contacts

ArtifactFormatPathNotes
Main AddressBook Database
addressbook_main
sqlite~/Library/Application Support/AddressBook/AddressBook-v22.abcddb
Per-Source Databases
addressbook_sourcesOptional
sqlite~/Library/Application Support/AddressBook/Sources/*/AddressBook-v22.abcddb
Siri Contact Suggestions
siri_changelogOptionallow value
sqlite~/Library/Application Support/AddressBook/ABAssistantChangelog.aclcddb

media

ArtifactFormatPathNotes
Contact Photos
contact_photosOptionalmedium value
binary~/Library/Application Support/AddressBook/Sources/*/.AddressBook-v22_SUPPORT/_EXTERNAL_DATA/*

config

ArtifactFormatPathNotes
Contacts Preferences
preferencesOptionallow value
binary_plist~/Library/Preferences/com.apple.AddressBook.plist

metadata

ArtifactFormatPathNotes
Database Info
database_infoOptional
binary_plist~/Library/Application Support/AddressBook/Configuration.plist