Join Us!

System time changed...
 
Notifications
Clear all

System time changed on Apple Mac  

  RSS
willnz1
(@willnz1)
New Member

Hi everyone,
I need some advice please. In the Windows OS, when someone changed the system date/time, places to get evidence are from Events files, “Setupapi.log” file, restore point folder creation dates, Virus scan logs etc.
Can anyone put me on the right track to get any evidence when someone changes the system date/time on an Apple Mac OS.

Thanks for the time.

Regards

Will Cronje

Computer Forensics NZ Ltd
www.computer-forensics.co.nz
Phone +64 9 35 99 424

Quote
Posted : 23/11/2010 1:20 am
Share: