Imaging APFS Snapshots within T2 Chipset Macs
As if APFS wasn’t adding enough complexity for forensic examiners, more and more Macs are now including T2 Security Chipsets. The T2 Security Chipset was borrowed from iOS devices. It serves many functions, however, the one that troubles forensic examiners is that it encrypts data at rest. This means that the files and folders contained [...]