EUROPE'S LEADING FORENSICS EXHIBITION AND CONFERENCE

DIGITAL FORENSICS | LABORATORY EQUIPMENT | SCENE OF CRIME | FORENSIC ANALYTICS

APFS Forensic Analysis: The Hard Parts

Loading

APFS Forensic Analysis: The Hard Parts

05 Mar 2019

While forensic tools are slowly catching up to support analysis of Apple’s new APFS file system, most are incapable of handling the difficulty that comes with APFS. How do you go back in time to review what happened on an APFS volume? In Apple’s latest file system, snapshots are now used to store the history of changes to files. In addition, the file system may be creating this back up data in snapshots whether the user knows it or not. Stu Hutchinson will review the snapshot functionality built into APFS and why snapshots will be useful in your investigations.

Speakers
Stuart Hutchinson, Vice President, International Sales - BlackBag Technologies

Supporting Partners

CONTENT PARTNER