Mac OS X Forensics
Never give up, the answer is right in front of you...
-
Our Sponsors
-
Custom Search
Resources
(contact us to submit your suggestions for any of
these sections)
See our Mac Forensic Hardware and Software Setup Pages as well.
Industry Contacts and Offerings
Reading
Video Training
Take-Apart Guides
Reviews
See our Mac Forensic Hardware and Software Setup Pages as well.
Sponsored Advertisement
Industry Contacts and Offerings
- Purdue University - Macintosh forensic training from the Cyber Forensics Lab
- BlackBag Technologies - basic, intermediate and advanced training in Macintosh forensics; full service forensics offerings
- SubRosaSoft, Inc. - MacForensicLab and MacLockPick training
- Access Data - Macintosh analysis training using FTK
- Forward Discovery - Macintosh Forensic Survival Course; full service forensics offerings
- DoD Cyber Crime Center - Macintosh Examinations training
- 7Safe - CMFS Applied Apple Mac Forensics Training Course
- Apple Inc. - training and certification in various Apple hardware and software
Reading
- “Mac OS X Malware Analysis” - SANS Reading Room white paper by by Joel Yonts
- "Digital Smoke: The Art of Incident Response" - an article on Macintosh incident response by Al Lewis
- "Using the HFS+ journal for deleted file recovery" - an article by Aaron Burghardt and Adam J. Feldman
- "BlackBag MacQuisition CF" - outlines the use of the tool including how to image a Mac without removing the hard drive. This technique includes the Macbook Air
- “Comparing the Mac OS X Property List to the Windows Registry” - great article posted on Forensic Focus by Dennis Browing, Champlain College
- “State of Mac Data Forensics” - Ars Technica article regarding Macs and digitals forensics
- “Mac for Computer Forensics & e-discovery” - Not exactly reading, this is a video seminar from Apple offering procedures, bestpractices, and tips/tricks for undertaking a forensics examination. The panel includes Detective Mark Honken, Marko Kostyrko, and Derrick Donnelly.
- “Mac OS X 10.5 Security Checklist” - SANS Whitepaper
- “Covering the Tracks on Mac OS X Leopard” - SANS Institute InfoSec Reading Room
- “Mac Forensics” written by Forensic 4Cast author ‘lee’
- “Macbook Air Acquisition” written by Forensic 4Cast author ‘lee’
- Book Review - Mac OS X , iPod, and iPhone Forensic Analysis DVD Toolkit gets reviewed by Gary Kessler, Associate Professor and Program Director at Champlain College in Burlington, VT.
- “The Future of Cyber Forensics”, a white paper by Dr. Marc Rogers about the Macintosh and its importance in digital forensics
- “Examining the seedy world of Mac OS X Forensics” - Macenstein article interviewing the authors of this site
Video Training
- “Forensics on Mac OS X - Learning how to recover and analyze data” - a free Podcast from Subrosasoft
- BlackBag TV - BlackBag Technologies has launched new videos on Mac forensics available at their website. They describe the videos as “preview segments of our incredible Mac forensic training, our software products, as well as tidbits on Mac forensics.”
Take-Apart Guides
- Other World Computing - Step by Step take Macintosh take apart guides and iPod
- iFixit - Do It Yourself Guides for Repair of Macintosh, iPhones and iPod
- BlackBag Technologies - BlackBag Suite
- SubRosaSoft, Inc. - MacForensicLab software, MacLockPick II
- AccessData - Ultimate Toolkit (Windows based but recognizes HFS)
- File Juicer - Extract multiple file formats from almost any file!
- Emailchemy - Weird Kid Software Products
Reviews