Forensic Collections from a Mac: Challenges & Solutions

For law enforcement, finding and dealing with Apple devices in the field can create confusion and headaches without first understanding some critical differences between Operating systems (HFS+, APFS and Windows file systems). With digital forensic professionals seeing more Mac laptops and other Apple devices more often, law enforcement and digital investigators must prioritize tackling these obstacles both in the field and the lab.

In this whitepaper, you'll learn:

• Solutions to overcoming Apple security and encryption to collect data
• Best practices for handling and securing Apple devices
• Why new Apple encryption means new ways to handle hardware must be considered