Chapter 11. Mac Forensics
After reading this chapter, you will be able to understand the following:
The importance of Mac forensics;
History of Apple devices;
Apple file systems: HFS and HFS+;
Virtual files on a Macintosh computer;
Property lists (PLists) and their value to investigators;
Applications and their associated files; ...