HFS+ and APFS vs exFAT and NTFS: Which File System is Best for Mac Forensic Imaging? There are many options when it comes to choosing the destination drive format for […]
POSIX vs Extended Attribute: Which Timestamps Should You Use? Timestamps are an essential part of computing, as they allow us to keep track of when a particular event took
How to decide which PALADIN is right for you? PALADIN has proven to be SUMURI’s biggest accomplishment in its mission to continually improve and assist the forensic community. For years,
MacOS is notoriously hard to work with when it comes to forensics. Things that are simple and routine for a Windows investigation become laborious and confusing in the Mac world.
Apple has made significant changes to the Mac lineup when transitioning from Intel processors to their Apple M1 Chip (Apple Silicon). Since then, forensic examiners have been confused about how