Drew Fahey, VP of Product Security at Blackbag Technologies, discusses forensic techniques on the Mac at the INFOSEC World Conference & Expo 2012.
From the Conference web site:
Topics covered:
- Understanding triage in the Mac environment
- Forensically previewing a Mac
- Acquiring volatile data including RAM from a Mac
- Locating areas of the greatest interest in typical investigations
- Making forensic images of Mac devices such as a MacBook Air
Originally recorded April 2, 2012.
