Mac OS X forensics website and book

A lot of the forensic software, research and investigations are still about Windows software, reflecting the market share that this operating system has. However, it looks like Apple is definitely doing some good work to grab its piece of the market.

When you run into one of these machines, it might give you a bit of a forensic challenge, as you have to deal with both another operating system (which is luckily Unix/BSD based) and with new hardware. Take a look at the various guides at http://www.ifixit.com/Guide/Mac/ to get a feeling about the number of screws you have to remove to get to a hard drive in a MacBook Pro for example…(luckily there are some other ways to create an image without removing the drive, for example using target disk mode).

Read more

Quality journalism…

Someone on the Digital Detective forum posted about an article in the Times, describing a supposed link between Muslim terrorists and child porn. Below is my reaction to his post, that I think would also fit here. Please have a read through the article before continuing.

Read more