DOCSLIB.ORG

Mojave Announcement V2.Fm

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Mojave Announcement V2.Fm AMP FOR ENDPOINTS MAC CONNECTOR Changes due to macOS 10.14 (Mojave) Introduction Apple has introduced two new security features in macOS 10.14 (Mojave) that affect the AMP for Endpoints Mac Connector. These changes are: 1. Improved User Data & Privacy Protections 2. Application Notarization This advisory describes how the AMP Connector is affected and the steps users and system administrators can take to ensure that AMP operates correctly. IMPORTANT! We encourage customers to delay upgrading to macOS 10.14 until AMP for Endpoints Mac Connector 1.9.0 becomes available. While it is possible to run the currently available AMP Connector (1.8.1) on macOS 10.14, the upcoming 1.9.0 release contains changes that improve compatibility. AMP for Endpoints Mac Connector 1.9.0 is expected to be available in October 2018. Improved User Data & Privacy Protections macOS 10.14 requires user approval before an application can access parts of the filesystem that contain personal user data (e.g. Contacts, Photos, Calendar, etc). Without approval, applications attempting to access these files may trigger a prompt for approval. If approval is not granted, the application will be denied access. 1 Improved User Data & Privacy Protections Impact on the Mac Connector Without approval, the AMP Connector will be unable to provide protection or visibility to these parts of the filesystem being protected by macOS. Some Connector functions may also be suspended while the user is being prompted to grant approval. Approving Full Disk Access at the Endpoint Users can pre-approve the AMP Connector by updating Privacy Options in Security & Privacy System Preferences and granting Full Disk Access to the AMP service daemon /opt/cisco/amp/ampdaemon. The ampdaemon file in AMP Connector 1.8.1 has a special property that prevents it from being dragged and dropped into the Privacy Options application list. To add ampdaemon to the list 1. Click [+] to add a new entry. 2. Press Command-Shift-G to bring up the "Go to the folder" prompt. 3. Type /opt/cisco/amp and click Go. 4. Choose ampdaemon and click Open. For AMP Connector 1.8.1 and earlier: After Full Disk Access approval has been granted, the AMP service daemon will also need to be restarted: sudo launchctl unload /Library/LaunchDaemons/com.cisco.amp.daemon.plist sudo launchctl load /Library/LaunchDaemons/com.cisco.amp.daemon.plist The drag-and-drop and service restart restrictions will be removed in AMP Connector 1.9.0. Approving Full Disk Access using MDM For customers using a Mobile Device Management (MDM) solution (e.g. Cisco Meraki) for deployment and management, Full Disk Access approval can be granted using the 2 2. Application Notarization Privacy Preferences Policy Control Payload in an MDM profile. This removes the need for action by the end-user. IMPORTANT! For customers using MDM, consult the MDM documentation or speak to the MDM vendor to learn how to grant Full Disk Access approval for the AMP for Endpoints Mac Connector. The Cisco AMP Team details are: • Name: Cisco Systems, Inc. (TDNYQP7VRK) • Team Identifier: TDNYQP7VRK Beginning with AMP for Endpoints Mac Connector 1.9.0, endpoints that have not granted access to the protected paths will send an Event that is visible in the AMP Console. You can determine which Connectors may be operating in a degraded state by reviewing the devices generating this Event type. 2. Application Notarization macOS 10.14 introduces a new security mechanism for software distributed outside the App Store called Application Notarization. Apple has created an automated service that executes security checks against applications submitted by developers. Once the checks are complete and if the application passes, a notarization ticket can be “stapled” to the application to indicate to macOS that the software can be installed without prompting for user approval. Impact on the Mac Connector Starting with AMP for Endpoints Mac Connector 1.9.0, Cisco will make changes to how the installer is made available to end users. Instead of distributing the AMP Connector as an un-notarized Installer Package (.pkg) file, 1.9.0 and newer releases will be distributed as an Apple Disk Image (.dmg) embedding a notarized Installer Package (.pkg) file. While this difference may be minor when invoking the installer 3 Summary manually, any automated processes used to deploy the Mac Connector across your environment will need to be modified to handle the new installation file format. A sample workflow may be: • Download amp_mac_connector.dmg from the AMP Console • Push amp_mac_connector.dmg to your endpoints • Mount the .dmg file $ hdiutil attach ampmac_connector.dmg • Execute the Apple notarized Mac Connector package file $ sudo installer -pkg /Volumes/ampmac_connector/ciscoampmac_connector.pkg -target / • Un-mount the .dmg file $ hdiutil detach /Volumes/ampmac_connector Summary macOS 10.14 (Mojave) introduces two new security features that affect the AMP for Endpoints Mac Connector. We encourage customers to delay upgrading to macOS 10.14 until AMP for Endpoints Mac Connector 1.9.0 becomes available in October 2018. While it is possible to run the currently available AMP Connector (1.8.1) on macOS 10.14, the upcoming 1.9.0 release contains changes that improve compatibility. In addition to upgrading to the 1.9.0 release when it becomes available, customers need to: 1. Ensure Full Disk Access is granted to the AMP service daemon: /opt/cisco/amp/ampdaemon 2. Re-evaluate the AMP install process to adjust for a installer file format change from a single Package Installer (.pkg) file to an Apple Disk Image file (.dmg) containing a Package Installer (.pkg) inside the image. The purpose of this advisory is to help AMP customers understand the impact of macOS 10.14. It is based on currently available information and may change without notice. Cisco continues to research, develop, and test to ensure that AMP runs seamlessly and effectively on macOS 10.14. Technical Resources: • Apple WWDC 2018 Talk regarding the new User Data & Privacy protections: https://developer.apple.com/videos/play/wwdc2018/702/?time=438 4 Technical Resources: • Apple’s MDM Documentation regarding the “Privacy Preferences Policy Control Payload”: https://developer.apple.com/enterprise/documentation/Configuration-Profile- Reference.pdf • Apple WWDC 2018 Talk regarding the new notarization workflow: https://developer.apple.com/videos/play/wwdc2018/702/?time=1769 • Apple Notarization Overview: https://developer.apple.com/developer-id/ 5.
Load more

Recommended publications
  • Non-Binary Analysis
    The Art of Mac Malware: Analysis p. wardle (The Art of Mac Malware) Volume 1: Analysis Chapter 0x5: Non-Binary Analysis Note: This book is a work in progress. You are encouraged to directly comment on these pages ...suggesting edits, corrections, and/or additional content! To comment, simply highlight any content, then click the icon which appears (to the right on the document’s border). 1 The Art of Mac Malware: Analysis p. wardle Content made possible by our Friends of Objective-See: ​ ​ Airo SmugMug Guardian Firewall SecureMac iVerify Halo Privacy In the previous chapter, we showed how the file utility [1] can be used to effectively ​ ​ identify a sample’s file type. File type identification is important as the majority of static analysis tools are file type specific. Now, let’s look at various file types one commonly encounters while analyzing Mac malware. As noted, some file types (such as disk images and packages) are simply the malware’s “distribution packaging”. For these file types, the goal is to extract the malicious contents (often the malware’s installer). Of course, Mac malware itself comes in various file formats, such as scripts and binaries. For each file type, we’ll briefly discuss its purpose, as well as highlight static analysis tools that can be used to analyze the file format. Note: This chapter focuses on the analysis of non-binary file formats (such as scripts). ​ ​ Subsequent chapters will dive into macOS’s binary file format (Mach-O), as well as discuss both analysis tools and techniques. 2 The Art of Mac Malware: Analysis p.
    [Show full text]
  • Copy of RECON LAB Full Manual
    Copy of RECON LAB Full Manual Copy of RECON LAB Full Manual by SUMURI 1 / 62 Copy of RECON LAB Full Manual 1. INTRODUCTION ............................................................................................ 6 1.1. WHY USE A MAC FOR FORENSIC ANALYSIS? ......................................... 6 1.1.1. APPLE EXTENDED ATTRIBUTES ............................................................ 6 1.1.2. VIEWING PROPER TIMESTAMPS ........................................................... 7 1.1.3. VIEWING FILES NATIVELY ..................................................................... 7 1.1.4. APPLE FILE SYSTEM (APFS) .................................................................. 7 1.1.5. LOCAL TIME MACHINE SNAPSHOTS (APFS) ........................................... 7 1.1.6. FILEVAULT ........................................................................................... 8 1.1.7. SUPPORT FOR OTHER FILE SYSTEMS .................................................. 8 1.2. HYBRID PROCESSING ENGINE ................................................................ 8 1.3. THREE STAGE ANALYSIS ......................................................................... 8 1.4. SUPPORT FOR OVER 270 TIMESTAMPS .................................................. 8 1.5. ADVANCED TIMELINES ............................................................................ 9 1.6. ADVANCED DATA CORRELATION ............................................................ 9 1.7. ADVANCED REPORTING WITH FULL CONTROL ...................................... 9 2.
    [Show full text]
  • Pc-Based Partitions
    Carrier_05.qxd 2/22/05 3:07 PM Page 81 PC-based5 Partitions The last chapter provided an overview of volume analysis and why it’s important. Now we’re going to leave the abstract discussion of volumes and dive into the details of the partition systems used in personal computers. In this chapter, we will look at DOS parti- tions, Apple partitions, and removable media. For each system, we review how it works and look at its data structure. If you are not interested in the data structure details, you can skip those sections. This chapter also covers special considerations that should be made when analyzing these systems. The next chapter will examine server-based partitioning systems. DOS PARTITIONS The most commonly encountered partition system is the DOS-style partition. DOS partitions have been used with Intel IA32 hardware (i.e., i386 / x86) for many years, yet there is no official specification. There are many Microsoft and non-Microsoft documents that discuss the partitions, but there is no standard reference. In addition to there being no standard reference, there is also no standard name. Microsoft now calls disks using this type of partition system Master Boot Record (MBR) disks. This is in comparison to a GUID Partition Table (GPT) disk that is used with the Extensible Firmware Interface (EFI) and the 64-bit Intel Itanium-based systems (IA64), which are discussed in the next chapter[Microsoft 2004a]. Starting with Windows 2000, Microsoft also differentiates between basic and dynamic disks. A basic disk refers to 81 Carrier_05.qxd 2/22/05 3:07 PM Page 82 CHAPTER 5 PC-BASED PARTITIONS either an MBR or a GPT disk, and the partitions in the disk are independent and stand- alone.
    [Show full text]
  • Testing Software Tools of Potential Interest for Digital Preservation Activities at the National Library of Australia
    PROJECT REPORT Testing Software Tools of Potential Interest for Digital Preservation Activities at the National Library of Australia Matthew Hutchins Digital Preservation Tools Researcher 30 July 2012 Project Report Testing Software Tools of Potential Interest for Digital Preservation Activities at the National Library of Australia Published by Information Technology Division National Library of Australia Parkes Place, Canberra ACT 2600 Australia This work is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 2.1 Australia License. To view a copy of this license, visit http://creativecommons.org/licenses/by-nc-sa/2.1/au/ or send a letter to Creative Commons, 543 Howard Street, 5th Floor, San Francisco California 94105 USA. 2│57 www.nla.gov.au 30 July 2012 Creative Commons Attribution-NonCommercial-ShareAlike 2.1 Australia Project Report Testing Software Tools of Potential Interest for Digital Preservation Activities at the National Library of Australia Summary 5 List of Recommendations 5 1 Introduction 8 2 Methods 9 2.1 Test Data Sets 9 2.1.1 Govdocs1 9 2.1.2 Selections from Prometheus Ingest 9 2.1.3 Special Selections 10 2.1.4 Selections from Pandora Web Archive 11 2.2 Focus of the Testing 11 2.3 Software Framework for Testing 12 2.4 Test Platform 13 3 File Format Identification Tools 13 3.1 File Format Identification 13 3.2 Overview of Tools Included in the Test 14 3.2.1 Selection Criteria 14 3.2.2 File Investigator Engine 14 3.2.3 Outside-In File ID 15 3.2.4 FIDO 16 3.2.5 Unix file Command/libmagic 17 3.2.6 Other
    [Show full text]
  • Arm® Forge User Guide Copyright © 2021 Arm Limited Or Its Affiliates
    Arm® Forge Version 21.0.2 User Guide Copyright © 2021 Arm Limited or its affiliates. All rights reserved. 101136_21.0.2_00_en Arm® Forge Arm® Forge User Guide Copyright © 2021 Arm Limited or its affiliates. All rights reserved. Release Information Document History Issue Date Confidentiality Change 2100-00 01 March 2021 Non-Confidential Document update to version 21.0 2101-00 30 March 2021 Non-Confidential Document update to version 21.0.1 2102-00 30 April 2021 Non-Confidential Document update to version 21.0.2 Non-Confidential Proprietary Notice This document is protected by copyright and other related rights and the practice or implementation of the information contained in this document may be protected by one or more patents or pending patent applications. No part of this document may be reproduced in any form by any means without the express prior written permission of Arm. No license, express or implied, by estoppel or otherwise to any intellectual property rights is granted by this document unless specifically stated. Your access to the information in this document is conditional upon your acceptance that you will not use or permit others to use the information for the purposes of determining whether implementations infringe any third party patents. THIS DOCUMENT IS PROVIDED “AS IS”. ARM PROVIDES NO REPRESENTATIONS AND NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, SATISFACTORY QUALITY, NON-INFRINGEMENT OR FITNESS FOR A PARTICULAR PURPOSE WITH RESPECT TO THE DOCUMENT. For the avoidance of doubt, Arm makes no representation with respect to, and has undertaken no analysis to identify or understand the scope and content of, third party patents, copyrights, trade secrets, or other rights.
    [Show full text]
  • Password Recovery Kit Forensic 12.3 All-In-One Password Recovery and Encrypted Evidence Discovery Solution
    Find.Decrypt.Open Password Recovery Kit Forensic 12.3 All-in-one password recovery and encrypted evidence discovery solution Passware Kit Forensic helps investigators to discover encrypted electronic evidence and decrypt it quickly. This software combines fast encryption detection engine, password recovery modules for 200+ file types, batch processing, and a portable version to meet all the requirements of law enforcement, governmental agencies, as well as corporate forensic professionals. The tool cracks passwords for documents, archives, databases and hard drives, Windows and Mac users, email accounts and websites. Many types of passwords are recovered or reset instantly. To achieve the highest speed, Passware Kit Forensic uses distributed password recovery and cloud computing, GPU and Tableau TACC hardware acceleration. Multiple files are processed simultaneously. Passware Kit Forensic is the only commercial software capable of instant decryption of BitLocker, TrueCrypt, FileVault2, and PGP hard disks, MS Office 2013 documents, as well as instant recovery of passwords for websites, Windows and Mac users, by analyzing hibernation files and live memory images acquired via FireWire. Key Benefits Recovers passwords for 200+ file types Including MS Office, PDF, Zip & RAR, QuickBooks, FileMaker, Lotus Notes, and many other popular applications Batch processing! Runs password recovery for groups of files without manual intervention Scans computers for encrypted evidence Detects all the encrypted files, reports encryption type and decryption
    [Show full text]
  • Macos Malware Analysis Framework Resistant to Anti Evasion Techniques
    Journal of Computer Virology and Hacking Techniques https://doi.org/10.1007/s11416-019-00335-w ORIGINAL PAPER Mac-A-Mal: macOS malware analysis framework resistant to anti evasion techniques Duy-Phuc Pham1 · Duc-Ly Vu2 · Fabio Massacci2 Received: 4 August 2018 / Accepted: 10 June 2019 © The Author(s) 2019 Abstract With macOS increasing popularity, the number, and variety of macOS malware are rising as well. Yet, very few tools exist for dynamic analysis of macOS malware. In this paper, we propose a macOS malware analysis framework called Mac-A-Mal. We develop a kernel extension to monitor malware behavior and mitigate several anti-evasion techniques used in the wild. Our framework exploits the macOS features of XPC service invocation that typically escape traditional mechanisms for detection of children processes. Performance benchmarks show that our system is comparable with professional tools and able to withstand VM detection. By using Mac-A-Mal, we discovered 71 unknown adware samples (8 of them using valid distribution certificates), 2 keyloggers, and 1 previously unseen trojan involved in the APT32 OceanLotus. Keywords Malware analysis · Static analysis · Dynamic analysis · Malware detection · MacOS · APT malware 1 Introduction There exist tools which support malware analysis of Win- dows, Linux or Android applications, while, investigation Contrary to popular belief, the Mac ecosystem is not unaf- of macOS malware and development of tools supporting fected by malware. In 2014, the first known ransomware monitoring their behavior is still limited in functionalities appeared, and other ransomware has been discovered as or anti-analysis resistance, or both. For example, the open Software-as-a-Service (SaSS), where malware is available source Mac-sandbox [2] is vulnerable to anti-analysis tech- as requests.
    [Show full text]
  • PUID Název Verze Přípona MIMETYPE Kategorie Výstupní
    PUID Název Verze Přípona MIMETYPE Kategorie Výstupní formát Výstupní formát alternativně I Výstupní formát alternativně II Originál vždy (doporučeno) Komentář x-fmt/1 Microsoft Word for Macintosh Document 3.0 mcw application/msword Word Processing § 23 odst. 2 fmt/100 Hypertext Markup Language 4.01 htm,html text/html Text (Mark-up) § 23 odst. 2 ano x-fmt/59 AutoCAD Last Saved Layer State las CAD ponechat x-fmt/2 Microsoft Word for Macintosh Document 6.0 Word Processing § 23 odst. 2 fmt/262 Microsoft Works Spreadsheet for DOS 3 Spreadsheet § 23 odst. 2 § 23 odst. 6 ano x-fmt/3 Online Description Tool Format odt Text (Structured) § 23 odst. 2 fmt/263 Microsoft Works Spreadsheet for DOS 3a Spreadsheet § 23 odst. 2 § 23 odst. 6 ano x-fmt/4 Write for Windows Document 3.1 wri Word Processing § 23 odst. 2 fmt/264 Microsoft Works Spreadsheet for DOS 3b Spreadsheet § 23 odst. 2 § 23 odst. 6 ano x-fmt/5 Works for Macintosh Document 4.0 Word Processing § 23 odst. 2 fmt/265 Microsoft Works Word Processor DOS 3 Word Processing § 23 odst. 2 x-fmt/6 FoxPro Database 2.0 dbf Database § 23 odst. 6 individuální posouzení archivem Pokud je součástí Shapefile, použít reprezentaci ve VDF (§ 23 odst. 2, 3) společně pro celý model. fmt/266 Microsoft Works Word Processor DOS 3a Word Processing § 23 odst. 2 x-fmt/7 FoxPro Database 2.5 dbf Database § 23 odst. 6 individuální posouzení archivem Pokud je součástí Shapefile, použít reprezentaci ve VDF (§ 23 odst. 2, 3) společně pro celý model.
    [Show full text]
  • Common Exist-Db / TEI Publisher Deployment Scenarios by Olaf Schreck and Lars Windauer
    presents: Common eXist-db / TEI Publisher Deployment Scenarios by Olaf Schreck and Lars Windauer sponsored by Common eXist-db / TEI-Publisher Deployment Scenarios - Workshop Overview ● Rough overview of eXist-db / TEI-Publisher ● Deployment of eXist-db / TEI-Publisher for ○ Editors ○ Developers ○ System Administrators ● Differentiation ○ This workshop can’t cover all possible deployment scenarios of eXist-db / TEI-Publisher thus we will concentrate on the ones which are most common from our perspective. Common eXist-db / TEI-Publisher Deployment Scenarios - eXist-db ● Open Source XML database and more ● Runs on any system Java runs on (Linux, Unix, MacOS, Windows) ● Minimal Prerequisites ○ Java (min. Version 8) ○ 200Mb disk space ○ 512Mb RAM Common eXist-db / TEI-Publisher Deployment Scenarios - TEI Publisher ● Open Source Instant Publishing Toolbox ● based on Open Source and Open Standards ○ mainly written in W3C XQuery and W3C Web Components ● requires eXist-db XML database ○ TEI Publisher 6 requires minimum eXist-db 5.0.0 eXist-db / TEI Publisher for Editors Photo by Clément Falize on Unsplash Common eXist-db / TEI-Publisher Deployment Scenarios - Editors - Docker ● Docker: the easiest way to run eXist-db / TEI Publisher ● Download, install and run Docker ● Download TEI Publisher docker image ○ docker pull existdb/teipublisher:latest ● Initial Startup of the TEI Publisher docker image ● docker run -p 8081:8080 -p 8444:8443 -v exist-data:/exist-data --name teipublisher existdb/teipublisher:latest ● open http://localhost:8081/exist/apps/tei-publisher/ in your Browser Common eXist-db / TEI-Publisher Deployment Scenarios - Editors - Docker ● docker stop teipublisher | stop the container ● docker start teipublisher | start the container ● docker logs teipublisher | show exist.log ● docker container ps -a | Lists all running and stopped containers ● docker cp teipublisher:/exist-data .
    [Show full text]
  • RECON LAB Manual
    MANUAL SUMURI.com 1. Introduction 7 1.1 Why Use a Mac for Forensic Analysis? 8 1.1.1 Apple Extended Attributes 8 1.1.2 Viewing Proper Timestamps 8 1.1.3 Viewing Files Natively 9 1.1.4 Apple File System (APFS) 9 1.1.5 Local Time Machine Snapshots (APFS) 9 1.1.6 FileVault 10 1.1.7 Support for Other File Systems 10 1.2 Hybrid Processing Engine 10 1.3 Three Stage Analysis 11 1.4 Support for Hundreds of Timestamps 11 1.5 Advanced Timelines 11 1.6 Advanced Data Correlation 11 1.7 Advanced Reporting With Full Control 12 2. Recommended Minimum Requirements 12 3. Helpful Hints 13 4. Getting Support 14 5. Renewing RECON LAB 14 6. Training 15 7. Installation 15 7.1 Installing Xcode and Command Line Tools 15 7.2 Installing FUSE for macOS 16 7.3 Installing Paragon Drivers 16 7.4 Downloading RECON LAB Updates 17 7.5 Installing RECON LAB 18 7.6 Granting Privileges 20 7.6.1 Full Disk Access 20 RECON LAB 1 7.7 Energy and Sleep Settings 22 8. Starting RECON LAB 23 8.1 Adding Your License 23 8.2 Installing Python 24 8.3 Admin Password 24 8.4 Access Warning Messages 25 8.5 RECON LAB Welcome Screen 26 9. Configuration 27 9.1 Examiner Details 27 9.2 Artifacts and Plugins 28 9.3 User Defined Extensions 31 9.4 User Defined File Signatures 32 9.5 Keyword Lists 33 9.6 Text Indexing Filters 35 9.7 Apple Metadata Filters 38 9.8 EXIF Metadata Filters 40 9.9 Volatility Path 41 9.10 System Password 42 9.11 Text View Settings 43 9.12 External Applications 44 10.
    [Show full text]
  • Absolute Endpoint Data Discovery
    FAQ Absolute Endpoint Data Discovery OVERVIEW ................................................................................................................................................................................................ 2 What is Endpoint Data Discovery? ...............................................................................................................................................2 How does Endpoint Data Discovery work? ..................................................................................................................................2 How do I activate Endpoint Data Discovery in the Absolute Platform? .....................................................................................2 What happens on devices once Endpoint Data Discovery is activated? ....................................................................................2 What Absolute editions receive Endpoint Data Discovery? ........................................................................................................2 How can I evaluate the Absolute Platform and Data Awareness?..............................................................................................2 DEVICE POLICIES.................................................................................................................................................................................... 3 How do I apply Endpoint Data Discovery within the Absolute Platform? .................................................................................3
    [Show full text]
  • Autonomy Information Connectivity
    Technical Brief Information Connectivity Autonomy Supports Virtually Any Format, Source and Language Every enterprise has a complex mix of off-the-shelf and custom applications, databases, information technologies and file formats. Autonomy is capable of aggregating any form of structured, semi-structured and unstructured data, wherever it is located, regardless of language. Supported Data Formats Support for over 1000 formats including: Archive • Graphics Interchange Format (.gif) • UNIS Composer 669 Module • Raw Audio CD Data (.cdr) • 7-Zip (7Z) • HP Graphics Language (.hpg) (.669) • Audition Loop (.cel) • Apple Disk Image (DMG) • Joint Photographic Experts Group • Six Channel Module (.6cm) • Creative Music Format (.cmf) • BinHex(HQX) (.jpeg) • Eight Channel Module (.8cm) • Sony Ericsson Protected Content • Bzip2 Compressed Archive Format • Lotus AMIDraw Graphics (.sdw) • Amiga OctaMed Music File File (.copy) (BZIP2) • Lotus Pic (.pic) (.8med) • Cubase Project (.cpr) • GZIP (GZ) • Macintosh Raster (.pic, .pict) • Amiga 8-Bit Sound File (.8svx) • Cubase Waveform File (.csh) • ISO-9660 CD Disc Image Format • MacPaint (.pntg) • Advanced Audio Coding File (.aac) • cVideo (.cvc) (ISO) • Microsoft Document Imaging • ABC Music Notation (.abc) • Cakewalk SONAR Project (.cwp) • Java Archive (JAR) (.mdi) • Audio Codec 3 File (.ac3) • OPL2 FM Audio File (.d00) • Legato EMailXtender Archive (EMX) • Microsoft Office Drawing (.mso) • ADPCM Compressed Audio File • OPL2 FM Audio File (.d01) • MacBinary Container (BIN) • Nero Encrypted File (.nef) (.act)
    [Show full text]