Mac forensics

Notes on Mac Forensics.

On the Web

• BlacBag Technologies site.
• Mac Forensics Yahoo Group

Apple's Resources

• Apple Security Updates
• Apple Tech Specs

Drive Image Tools

• Carbon Copy Cloner
• DiskWarrior

Forensics Programs

• BlackLight®, by BlackBag Technologies

Terminal Hacks

Is FV2 running?

   fdsetup status

People

Ryan Kubasiak, previously ran http://www.macosxforensics.com/, now on the digital crimes team at Apple

Archives

• MacOS X Forensics, Philip Craiger and Paul Burke, IFIP, DigitalForensics 2006, Advances in Digital Forensics II