Tabla de Contenidos:
  • Tiger and Leopard Mac OS X operating systems
  • Getting a handle on Mac hardware
  • Mac disks and partitioning
  • HFS plus file system
  • FileVault
  • Time machine
  • Acquiring forensic images
  • Recovering browser history
  • Recovery of e-mail artifacts, iChat, and other chat logs
  • Locating and recovering photos
  • Finding and recovering Quicktime movies and other video
  • Recovering PDFs, word files, and other documents
  • Forensic acquisition of an iPod
  • iPod forensics
  • Forensic acquisition of an iPhone
  • iPhone forensics.