* subscribe at http://techPolice.com "Sifting Through the Mac Hard Drive" Law Enforcement Technology (01/01) Vol. 28, No. 1, P.92 Donofrio, Andrew W. Macintosh computers have always posed a special problem to computer forensics specialists, because actual working experience among the technicians on Mac operating systems tends to be rare. In addition, few Macs (if any) ever see the inside of a forensics lab, so there has been no previous reporting or formal documentation made of the interworkings of the Macintosh hard drive. Specialists used to have to rely on Linux, the pseudo-Unix operating system that will process Mac data, but now there are some new commercially available forensics software programs designed to process the Mac drive. EnCase, by Guidance Software, is capable of creating a bit-stream image of the data to read and mount Mac partitions, show deleted files, and allow the forensics specialist to run search strings against the readable data, the file stack, and unallocated spaces. The software will also produce detailed reports on the findings. Ilook Investigator allows the technician to load a SafeBack image on a Mac hard drive. It also accommodates search strings and peeks at unseen data in the unallocated drive spaces. (http://www.letonline.com). /=-=-=-=-Click Here & Support Our Sponsor-=-=-=-=-=-=-=-=-=\ DEBT REDUCTION HELP! Did you know you can get INSTANT assistance lowering your interest charges and debt? If you have $5000 or more in credit card debt, click here to learn more about this exceptional offer. http://click.topica.com/aaabrob1dhr0b1uN1Ic/edebtconsolidation \=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=/ --via http://techPolice.com archive: http://theMezz.com/cybercrime/archive unsubscribe: [EMAIL PROTECTED] subscribe: [EMAIL PROTECTED] url: http://theMezz.com/alerts ____________________________________________________________ T O P I C A -- Learn More. Surf Less. Newsletters, Tips and Discussions on Topics You Choose. http://www.topica.com/partner/tag01
