Analysis & Correlation of Mac Logs - SANS
Analysis & Correlation of Mac Logs - SANS
Analysis & Correlation of Mac Logs - SANS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Volume Alias Data<br />
Dates & Mount Point<br />
File Creation Time (HFS Date)<br />
May or may not be present<br />
Only seen on H+ formatted disks<br />
DMG<br />
USB<br />
oompa@csh.rit.edu | @iamevltwin