±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35667
New Yesterday: 6 Visitors: 126

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Search found 16 matches

Re: Mac OSx System.log

Post Posted: Sep 21, 13 19:40

I would definitely suggest FTK for Mac OS X investigations. Handles HFS and also parses .plist files for easier reviewing.
zekituredi
Topic: Mac OSx System.log
Replies: 4
Views: 4614
 

Re: Macintosh deleted files - are there any logs?

Post Posted: Jul 24, 13 00:51

There are a large amount of .Plist files dotted around the Mac OS X that could be of help but it really determines exactly what kind of files you are looking for.
zekituredi
Topic: Macintosh deleted files - are there any logs?
Replies: 4
Views: 9584
 

Re: OS X Thumbnail Database

Post Posted: Jun 07, 13 14:47

You can use Scalpel to carve out thumbnailcache files.
zekituredi
Topic: OS X Thumbnail Database
Replies: 3
Views: 6337
 

Re: LIVE FORENSIC

Post Posted: Mar 10, 13 21:56

You will find plenty of scripts on the internet as well as resources that will show you how to capture RAM for different operating systems.

You just have to spend sometime looking for it. I would a ...
zekituredi
Topic: LIVE FORENSIC
Replies: 11
Views: 5253
 

Re: Remote wipe of Mac Airbook

Post Posted: Mar 01, 13 03:53

I have a feeling I read somewhere that trim is not enabled on all models of the MacBook Air, only the newest models.

Anyway is it not best to always check, just in case?
zekituredi
Topic: Remote wipe of Mac Airbook
Replies: 8
Views: 10029
 

Re: 2nd Year uni student - Mobile forensic app

Post Posted: Jan 23, 13 20:04

If this application is for only for documenting electronic devices that have been seized it will be much more hassle during an execution of a warrant compared to the practices that are already impleme ...
zekituredi
Topic: 2nd Year uni student - Mobile forensic app
Replies: 8
Views: 6780
 

Mio Spirit 485

Post Posted: Oct 09, 12 13:29

Has anyone got any experience with the Mio Spirit 485 Sat Nav?
zekituredi
Topic: Mio Spirit 485
Replies: 0
Views: 1841
 
Page 1 of 3
Page 1, 2, 3  Next