Posts Tagged ‘apple forensics’

Most Recent
 
Read More
2017-11-05

Unlock or decrypt an APFS drive

One of the main features of macOS High Sierra is the new file system of APFS. Apple File System is a new, modern file system optimized for working with Flash / SSD drives. It includes the functionality of strong encryption, copy-on-write, space sharing, cloning files and folders, creating snapshots. As part of the working with the Apple File System (APFS) volumes, it may be necessary to decrypt a boot drive using APFS’s native encryption in order to fix a problem.

2711
 
Read More
2017-09-30

EFI Firmware Security

Rich Smith and Pepijn Bruienne delivered a speech at the Ekoparty in Buenos Aires on September 29, 2017, which was dedicated to their recent research. They conducted research on the security support provided by Apple’s EFI firmware. After the presentation, a technical document was issued, which more closely examines the data collected by them during this analysis.

 

97
 
Read More
2016-05-21

QuickLook Python Parser

Mari DeGrazia has written a fresh python script.

154
Latest Headlines
 
Read More
673
 
Read More
373
 
Read More
750

Trending Topics
digital forensics
computer forensics
Articles
mobile forensics
DFIR
digital forensics software
Android forensics
windows forensics
incident response
Top Stories
 
 
Right Now
 
bstrings 1.0 released
Top Five
Heat Index
 
1
Decrypting encrypted WhatsApp databases without the key
 
2
How to Make the Forensic Image of the Hard Drive
 
3
Extracting data from SmartSwitch backups
 
4
Forensic tools for your Mac
 
5
An Overview of Web Browser Forensics