Surviving Digital Forensics Understanding OS X Time Stamps

Surviving Digital Forensics Understanding OS X Time Stamps

Details:

Surviving Digital Forensics: Understanding OS X Time Stamps
MP4 | Video: 1280x720 | 73 kbps | 44 KHz | Duration: 2 Hours | 266 MB
Genre: eLearning | Language: English


Build core computer forensic skills and learn how to interpret & validate Mac OS X dates & times

Welcome to the Surviving Digital Forensics series. This class is focused on helping you get a better understanding of OS X Time Stamps and to become a better Mac examiner.

As with previous SDF classes you will learn by doing. The class begins with a brief overview of OS X time - as Apple sees it - then we will get into a number of validation exercises to see how user activity really affects Apple time stamps. Learning is hands on and we will use applications already installed on your Mac to do so.

Expert and novice Mac examiners alike will gain from this class. Since we are doing it the SDF way we are going to teach you real computer forensic skills that you can apply to all versions of OS X. Therefore you are not just going to learn about OS X timestamps but learn a method you can use to answer many date and time questions that may come up in the future.

Class Outline

1. Introduction and Welcome to the SDF series

2. What this class is all about

3. How to get the most of this class

4. The finer points of OS X dates and times

5. Time from a User's point-of-view

6. Apple metadata timestamps & the MDLS command

7. Latency issues

8. Validation Exercise: New file

9. Validation Exercise: Modified file

10. Validation Exercise: Moving file within same volume

11. Validation Exercise: Moving file to a different volume

12. Validation Exercise: Accessing a file

13. Validation Exercise: Downloading a file

14. Validation Exercise: Deleting a file

15. Summary of findings

16. Thoughts on time attribute artifacts

17. Conclusion & final thoughts



PS : If You got an error while extracting while others are working try diferent directory path in your PC. Somtimes if you got a long directory path while extracting it will giv you an error. To solve this issue , as an example just paste the tgz file in C drive and extract (just inside the C drive not with in any other folder). Hope your Understand

Update Torrent Stats to see Current Seeders and Leechers

Visit my account to download more apps and ebooks + magazines

If This Torrent Helpful Please Support the Authors by Purchasing It!.. Thanx