Episode 52: Digital Forensics on the Mac with Sarah Edwards

Mac Admins Podcast, Episode 52: Digital Forensics on the Mac with Sarah Edwards

Synopsis

Sarah Edwards joins us to talk about Digital Forensics on the Mac, and using system tools, special software, and all kinds of other cool tools to do forensic research on iOS devices and Macs.

Your Hosts:

Charles Edge, Director of Professional Services at JAMF Software, That Guy at Krypted.com [@cedge318]
Pepijn Bruienne, R&D Engineer at Duo Security [@bruienne], Proprietor of EnterpriseMac.Bruienne.com
Tom Bridge, Partner at Technolutionary LLC [@tbridge]
Marcus Ransom, Professional Services Manager at Education Advantage [@marcusransom]
Adam Codega, Consultant [@adamcodega]

Guests

Sarah Edwards, mac4n6.com – Mobile Forensics Engineer, Parsons Corporation / SANS Author & Instructor of Mac Forensic Analysis – [@iamevltwin]

Listen!

Links & Notes

Mac 4n6 Blog
Location scraper
MacMRU Parser

OpenBSM Auditing on macOS

OpenBSM article in MacTech (from Rich Trouton)

iOS Frequent Locations Dumper

HFSPlus Resources

Chicago Tribune

Stanford Heart Research

iTunes Information

Qi Charging

Community Calendar, Sponsored by Watchman Monitoring

Call for Presenters

Mac AD UK in Leicester Square, February 20-21, 2018

Conference Sites

Macsysadmin in Gothenburg, Sweden October 3-6 2017
JNUC in Minneapolis, MN October 24-26, 2017
MacTech Conference in Los Angeles, CA on November 15-17 2017

Meet-ups

Melbourne Apple Admins for Thursday 28th September at REA
#franken-macadmins Meetup in Nuremberg, Germany, next meeting is on 9/28, for more info visit us over at #franken-macadmins
Netherlands Apple Admins will meet Thursday 9/28 at 1:30, at LAI in Schiedam, the Netherlands
Apple Admins of Seattle will meet on 9/28 at Synapse.
Mac Admin Monthly will meet on 10/10 at Google in New York and by Google Hangout.