Posts Tagged ‘filevault2 forensics’

Most Recent
 
Read More
2018-02-02

Secure Token and FileVault

Apple introduced Secure Token. Secure Token is a new and undocumented account attribute that you now need to add to the user account. The Secure Token attribute is automatically added to the first account to log in to the loginwindow of the operating system on a specific Mac.

182
 
Read More
2016-07-20

Mounting and Reimaging an Encrypted FileVault2 Mac Image in Linux

Mari DeGrazia continues her Mac imaging series.

490
 
Read More
2016-06-28

Imaging Apple FileVault2 encrypted drives

Recently our lab has faced a lot of Apple FileVault2 encrypted drives.

706
Latest Headlines
 
Read More
724
 
Read More
396
 
Read More
775

Trending Topics
digital forensics
computer forensics
Articles
mobile forensics
DFIR
digital forensics software
Android forensics
windows forensics
incident response
Top Stories
 
 
Right Now
 
bstrings 1.0 released
Top Five
Heat Index
 
1
Decrypting encrypted WhatsApp databases without the key
 
2
How to Make the Forensic Image of the Hard Drive
 
3
Extracting data from SmartSwitch backups
 
4
Forensic tools for your Mac
 
5
An Overview of Web Browser Forensics