macOS and iOS Forensic Analysis

This poster features "Evidence of..." categories that provide key macOS and iOS operating system artifacts that are relevant to digital investigations, and map to those provided by SANS DFIR Faculty for Windows systems in the Windows Forensic Analysis poster. This poster was produced by FOR308: Digital Forensics Essentials course co-author Kat Hedley and FOR518: Mac and iOS Forensic Analysis and Incident Response course author Sarah Edwards.

August 4, 2023
Mac and iOS Forensic Analysis and Incident Response