Chapter 11. Mac Forensics
Learning Outcomes
After reading this chapter, you will be able to understand the following:
The importance of Mac forensics;
History of Apple devices;
Apple file systems: HFS and HFS+;
Virtual files on a Macintosh computer;
Property lists (PLists) and their value to investigators;
Applications and their associated files; ...
Get A Practical Guide to Computer Forensics Investigations now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
