±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35390
New Yesterday: 0 Visitors: 125

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 16 matches

Re: Mac OSx System.log

Post Posted: Sep 21, 13 13:40

I would definitely suggest FTK for Mac OS X investigations. Handles HFS and also parses .plist files for easier reviewing.
zekituredi
Topic: Mac OSx System.log
Replies: 4
Views: 4551
 

Re: Macintosh deleted files - are there any logs?

Post Posted: Jul 23, 13 18:51

There are a large amount of .Plist files dotted around the Mac OS X that could be of help but it really determines exactly what kind of files you are looking for.
zekituredi
Topic: Macintosh deleted files - are there any logs?
Replies: 4
Views: 9333
 

Re: OS X Thumbnail Database

Post Posted: Jun 07, 13 08:47

You can use Scalpel to carve out thumbnailcache files.
zekituredi
Topic: OS X Thumbnail Database
Replies: 3
Views: 6145
 

Re: LIVE FORENSIC

Post Posted: Mar 10, 13 15:56

You will find plenty of scripts on the internet as well as resources that will show you how to capture RAM for different operating systems.

You just have to spend sometime looking for it. I would a ...
zekituredi
Topic: LIVE FORENSIC
Replies: 11
Views: 5126
 

Re: Remote wipe of Mac Airbook

Post Posted: Feb 28, 13 21:53

I have a feeling I read somewhere that trim is not enabled on all models of the MacBook Air, only the newest models.

Anyway is it not best to always check, just in case?
zekituredi
Topic: Remote wipe of Mac Airbook
Replies: 8
Views: 9820
 

Re: 2nd Year uni student - Mobile forensic app

Post Posted: Jan 23, 13 14:04

If this application is for only for documenting electronic devices that have been seized it will be much more hassle during an execution of a warrant compared to the practices that are already impleme ...
zekituredi
Topic: 2nd Year uni student - Mobile forensic app
Replies: 8
Views: 6681
 

Mio Spirit 485

Post Posted: Oct 09, 12 07:29

Has anyone got any experience with the Mio Spirit 485 Sat Nav?
zekituredi
Topic: Mio Spirit 485
Replies: 0
Views: 1800
 
Page 1 of 3
Page 1, 2, 3  Next