SANS 518: Mac Forensic Analysis PDFs & MP3 (2015)
English | Size: 2.25 GB
Category: Tutorial
Mac and iOS Fundamentals: How to analyze and parse the Hierarchical File System (HFS+) by hand and recognize the specific domains of the logical file system and Mac-specific file types.
User Activity: How to understand and profile users through their data files and preference configurations.
Advanced Analysis and Correlation: How to determine how a system has been used or compromised by using the system and user data files in correlation with system log files.
Apple Technologies: How to understand and analyze many Mac and iOS specific technologies, including Time Machine, Spotlight, iCloud, Document Versions, FileVault, Continuity, and FaceTime. [Read more…]