Justin Boncaldo has written a post about forensic analysis of Netflix app. It seems the app doesn’t store a lot of data locally, especially the kind of data that can be used for forensic purposes, but you can find some user-action related data.
-
Incident Forensics Lifecycle
Recently I’m becoming more and more interested in cyber threat intelligence. I even … -
Shining a light on Spotlight: Leveraging Apple’s desktop search utility to recover deleted file metadata on macOS
Spotlight is a proprietary desktop search technology released by Apple in 2004 for its Mac… -
Load More Related Articles
-
Digging Up the Past: Windows Registry Forensics Revisited
David Via from FireEye has written a very good article focused on the following known sour… -
Extracting Activity History from PowerShell Process Dumps
Lee Holmes has posted about how to extract activity history from PowerShell process dumps.… -
An introduction to file-system post-mortem forensic analysis
Computer Incident Response Center of Luxembourg has published materials used during their …
Load More In How To
