apple forensics

This tag is associated with 3 posts

How To Boot Scan A Mac With APFS And FileVault 2

Posted by Scar de Courcier ⋅ October 17, 2019 ⋅ Leave a comment

Hi, I’m Rich Frawley and I’m the Digital Forensic Specialist with ADF Solutions. Today we are going to conduct a boot scan of a MacBook Air that has APFS and FileVault 2 enabled. At this point you have decided on a search profile or profiles to use and and prepared your collection key. When conducting … Continue reading →

How To Acquire Data From A Mac Using MacQuisition

Posted by Scar de Courcier ⋅ September 13, 2019 ⋅ 1 Comment

Written by: Justin Matsuhara, Solutions Engineer, BlackBag Technologies Stephanie Thompson, Solutions Engineer, BlackBag Technologies Depending on the digital forensic imaging tool you have available, creating a forensic image of a Mac computer can be either an anxiety-creating situation, or as easy as “1-2-3-START”. There are several things you must identify ahead of attempting a full … Continue reading →

Apple iPhone Forensics: Significant Locations

Posted by Scar de Courcier ⋅ May 28, 2018 ⋅ 2 Comments

by Patrick Siewert, Principal Consultant, Pro Digital Forensic Consulting I recently attended a conference of civil litigators in Virginia. During the cocktail hour and after a very interactive CLE presentation on “Leveraging Data in Insurance Fraud Investigations”, I was talking with a few attendees about the different types of data available to them in their … Continue reading →