Although Microsoft has officially dropped support for Windows Media Player for Mac (Microsoft redirects Mac users to the Flip4Mac website as they actively develop a free plugin that allows QuickTime to play Windows Media documents), there are still many users that have Windows Media Player for Mac installed on their systems. Data that shows what video files a user has viewed can help an investigator prove intent and direct them to files of interest.
You can use the MacForensicsLab analyze function to explore the following file: ~/Library/Preferences/Windows Media Player Prefs This file shows all the movies recently opened in Windows Media Player. The files come in pathname structure with names which will help point the investigator to the actual documents.
