October 2020
Intermediate to advanced
720 pages
21h 24m
English
Learning Outcomes
After reading this chapter, you will be able to understand the following:
The importance of Mac forensics;
The history of Apple devices;
Apple file systems: HFS, HFS+, and APFS;
Apple software and hardware encryption;
Virtual files on a Macintosh computer;
Property lists (PLists) and their value to investigators;
Applications and their associated files;
Hardware and software forensics tools for Macintosh computers and iOS devices; and
Examining Apple mobile devices.
Mac forensics has grown in importance in recent times. While Microsoft Windows-based computers still enjoy the majority of market share, especially in the corporate world, Macintosh computers have become more pervasive. The tremendous ...
Read now
Unlock full access