Spotlight is the default indexing engine on iOS™ and macOS®. It is ON by default and stores information about almost every file and folder on the file system. This information includes hundreds of different types of metadata from file-paths and MAC timestamps to document titles, authors, dates viewed and image/video exif tag information. It is … Continue reading Spotlight: Your Forensic Goldmine in iOS & macOS

his training is intended for U.S. Criminal Justice Practitioners. Please register using your agency-issued email. This webinar is live only and will not be available on-demand. Registrations will close 24 hours before webinar start time. The NDCAC is a national center established under the Department of Justice designed to help facilitate technical knowledge management, to … Continue reading NDCAC Resources for Law Enforcement in the Digital Age

Why do we need to learn Linux forensics? Well, nowadays when you look at the number of tools available on different penetration testing systems running Linux, you should stop and ask yourself a basic question “are these tools and systems always going to be used for ethical purposes?” The answer is definitely, NO! Another reason … Continue reading Linux Forensics and Why it’s Important