http://ow.ly/63XiY
Article by Joshua Gilliland, Esq. appearing on his blog "Bow Tie Law".
This is an article that discusses best practices when it comes to collecting data from Apple based computer systems. The article points out that there is an increased amount of ESI stored on Mac computers, and that special considerations need to be taken for collecting and preserving such evidence.
The article quotes Charlie Kaupp of Digital Strata stating that he suggests the following:
"Apple ESI Collection needs have been addressed with tools such as Macquisition from Black Bag, which is a bootable forensic image creation tool akin to Encase or FTK.
Processing needs have been addressed with services such as Digital Strata’s Review-Ready Conversion service. These services will allow Mac data to be converted to file types that can be handled by review platforms while maintaining chain of custody and all metadata with a load file."
No comments:
Post a Comment