AccessData FTK und MacOS

Brian Salmon von hat eine Anleitung zur Analyse von MacOS-Systemen mit HFS/HFS+ Dateisystemen mit AccessDatas FTK 3 veröffentlicht. Er fasst zusammen:

FTK v3 has many features for Macintosh analysis that were not previously available in a single Windows based forensic tool. This allows analysts who are typically examining Windows systems to use the tool and platform that they are familiar with to successfully complete an examination of a Macintosh computer. This is especially important to analysts who do not have access to or the knowledge required to use a Mac to analyze a Mac.


Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert.

This site uses Akismet to reduce spam. Learn how your comment data is processed.