کد مقاله | کد نشریه | سال انتشار | مقاله انگلیسی | نسخه تمام متن |
---|---|---|---|---|
456544 | 695733 | 2008 | 8 صفحه PDF | دانلود رایگان |
![عکس صفحه اول مقاله: MEGA: A tool for Mac OS X operating system and application forensics MEGA: A tool for Mac OS X operating system and application forensics](/preview/png/456544.png)
Computer forensic tools for Apple Mac hardware have traditionally focused on low-level file system details. Mac OS X and common applications on the Mac platform provide an abundance of information about the user's activities in configuration files, caches, and logs. We are developing MEGA, an extensible tool suite for the analysis of files on Mac OS X disk images. MEGA provides simple access to Spotlight metadata maintained by the operating system, yielding efficient file content search and exposing metadata such as digital camera make and model. It can also help investigators to assess FileVault encrypted home directories. MEGA support tools are under development to interpret files written by common Mac OS applications such as Safari, Mail, and iTunes.
Journal: Digital Investigation - Volume 5, Supplement, September 2008, Pages S83–S90