O'Reilly logo

A Practical Guide to Computer Forensics Investigations by Darren R. Hayes

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 11. Mac Forensics

Learning Outcomes

After reading this chapter, you will be able to understand the following:

Image The importance of Mac forensics;

Image History of Apple devices;

Image Apple file systems: HFS and HFS+;

Image Virtual files on a Macintosh computer;

Property lists (PLists) and their value to investigators;

Applications and their associated files; ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required