[FRIAM] Digital forensics

Tom Johnson tom at jtjohnson.com
Thu Apr 18 16:14:10 EDT 2019


Russ Standish wrote:





*"Using Linux, you can just mount the Mac's hard drive, and use unixtools
to investigate those files that were touched in the time span ofinterest.
To be really sure, you should clone the drive first (egusing the Linux dd
command) so that you don't accidently destroy anyevidence in your poking
around (you work with just the copy)."*

Do we have any digital forensics shops in ABQ or NM?
TJ

============================================
Tom Johnson - tom at jtjohnson.com
Institute for Analytic Journalism   --     Santa Fe, NM USA
505.577.6482(c)                                    505.473.9646(h)
*NM Foundation for Open Government* <http://nmfog.org>
*Check out It's The People's Data
<https://www.facebook.com/pages/Its-The-Peoples-Data/1599854626919671>*

============================================

<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=icon>
Virus-free.
www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail&utm_term=link>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://redfish.com/pipermail/friam_redfish.com/attachments/20190418/6e36ab58/attachment.html>


More information about the Friam mailing list