Episode 128: APOLLO and Forensic Analysis, with Sarah Edwards

Synopsis:

Sarah Edwards joins the pod to talk all about APOLLO with Marcus, Charles and Tom, and about all the challenges of forensics and security on the macOS and iOS platforms.

Your Hosts:

Tom Bridge, Partner, Technolutionary LLC [@tbridge777]
Marcus Ransom, Senior Apple Systems Engineer, CompNow [@marcusransom]

Our Guest:

Sarah Edwards, Mobile Forensic Engineer & Author/Instructor at SANS Institute, [@iamevltwin]

Presenting Sponsor: VMware Workspace ONE

VMware Workspace ONE empowers you with full macOS lifecycle management. Get past the hassles of legacy imaging with faster modern onboarding. Easily deliver all your native Mac app packages as well as SaaS and virtual Windows apps, and empower users with one-click single sign on. Stay on top of your security needs with complete encryption management and rich conditional access. The recognized industry leading unified endpoint management solution is your one stop for all Apple devices and apps. Learn more at www.workspaceone.com

Listen!

Links & Notes

Apollo
Apollo releaseWired Article: https://www.wired.com/story/cellebrite-ufed-ios-12-iphone-hack-android/
NSKeyedArchiver
Protocol Buffers
Protobuf
Apple’s ‘Find My’ Feature uses some very clever crypto

Supporting Sponsors

Thanks to new sponsor cmdReporter for sponsoring the Mac Admins Podcast!

Use code MACADMINS at checkout, good for 50% off your first month of a Mac mini subscription!

Patreon Sponsors

The Mac Admins Podcast has launched a Patreon Campaign! Our named patrons this month include Randy Wong, Chad Swartwout, William Smith, Justin Holt, Weldon Dodd, Jon Brown, Randy Wong, Dan Collings, Jason Dettbarn and Seb Nash. Thanks everyone!

Mac Admins Podcast Community Calendar, Sponsored by Watchman Monitoring

Conference Sites

Event Name	Location	Dates	Cost
MacAdmins Conference	State College, PA	9-12 July 2019	$649 Early Bird until 13 May
MacSysAdmin	Göteborg, Sweden	1-4 October 2019	11700 SEK
MacTech Conference	Los Angeles, CA	15-18 October 2019	$999 Early Bird til 28 June
Jamf Nation User Conference	Minneapolis, MN	12-14 November 2019	$799 Early Bird Rate ($699 for EDU)

Meetups

Event Name	Location	Dates	Cost
Houston Apple Admins	Saint Arnold Beer Garden	17 July 2019, 5:30 p.m. CT	Free
Apple Admins of Seattle and the Great Northwest	Fred Hutch	18 July 2019, 6.00 p.m. PT	Free
Los Angeles Mac Admins	Broadcom, 15101 Alton Pkwy, Irvine, CA 92618	24 July 2019, 5:00 p.m. PT	Free
Apple Admins of Seattle and the Great Northwest	TBD	15 August 2019, 6.00 p.m. PT	Free
Apple Admins of Seattle and the Great Northwest	TBD	19 September 2019, 6.00 p.m. PT	Free