Blog

We have some exciting news to share with our friends, customers, and partners.  Effective February 1, we have officially welcomed Vico Marziale and...

One aspect of digital forensics that merits specific attention for today's investigators is Apple's FileVault 2 encryption. FileVault 2 has become increasingly prevalent on OS...

There are many legitimate reasons why someone might wipe an iOS device.  A corporate IT administrator might do so prior to assigning a device to...

What time is it? The time is 3442503385. This number makes sense to our startup chiming Mac machinery (it is a Mac OS timestamp), but we’ve...

One of our top tech support questions is “Are iOS device passcodes different than iOS backup passwords?” The answer is ‘yes’, and this blog seeks...

The BlackLight forensic analysis software includes two very powerful metadata file filters that allow forensic analysts to quickly isolate data on iPhone and iPad devices...

In part one of this blog series, we covered ways a Mac forensic examiner may view .plist files using both Apple and third-party tools. Part...

In part one of this blog series we covered the many ways a Mac forensic examiner may view .plist files using both Apple and third-party...

With the introduction of Mac OS X (10.6) Snow Leopard, the OS X operating system began logging USB device connections. Mac forensic examiners may locate...

Introduction Our Mac Forensics instructors spend a lot of time discussing preference list files, or .plist files, as these files are often valuable repositories for historical...