Apple MacOSX Digital Forensics
Disk Image Acquisition (this can work on any iOS Device connected via USB-C
Reference
- Course Demo – FOR518_H02 – https://ondemand-player.sans.org/12780
- MacOS Forensics DIY Style – https://aboutyou.tech/blog/macos-forensics-diy-style-3369868505dd/
- Imaging APFS – A Walkthrough for Starting Forensics on MacOS – https://www.youtube.com/watch?v=cThb0y5eNTs
- MacOS DS_Stores: Like Shellbags but for Macs – SANS DFIR Summit 2019 https://www.youtube.com/watch?v=FOpiDSAD-Yk
- Forensic Collections From a Mac: Challenges & Solutions – https://www.cyberdefensemagazine.com/forensic-collections-from-a-mac-challenges-solutions/
- Magnet – https://www.youtube.com/watch?v=HJau2PkdT1o
- MacOS Cheat Sheet – http://www.detectx.com.au/digital-forensics-and-incident-response/
- GIT- https://github.com/n0fate/mac-osx-forensics
- https://gist.github.com/0xmachos/6e8b813cffc2035914606bd4cda491d2
- https://aboutyou.tech/blog/macos-forensics-diy-style-3369868505dd/
- https://darkdefender.medium.com/brief-introduction-to-macos-forensics-f817c9c83609
- https://eforensicsmag.com/product/macos-forensics/
- https://jsac.jpcert.or.jp/archive/2022/pdf/JSAC2022_workshop_macOS-forensic_en.pdf
- https://www.arcpointforensics.com/news/macos-forensic-artifacts
- https://www.vestigeltd.com/resources/articles/mac-forensics-is-different/