Wed, Jun 10|
DataExpert Technology Limited
Mac Forensic Workshop: Artifacts and Apple timestamps analysis with RECON LAB
Be cautious when analyzing APFS with Windows-based forensic solutions! You may miss tons of important metadata, and maybe get wrong timestamps. Let's show you how to analyze Apple file system with real MacOS-based forensic tool.
Time & Location
Jun 10, 2020, 3:00 PM – 5:00 PM
DataExpert Technology Limited, 803 & 805, 8/F., Tower 1, Ever Gain Plaza, No.88 Container Port Road, Kwai Chung, Hong Kong
About the Event
RECON LAB was the first to identify, parse and report on Apple Extended Metadata natively. Until now you have been missing case solving evidence that has been there the entire time. Since the release of RECON LAB, there had been no forensic tools capable of identifying and properly parsing this data.