Identifying Attached USB Devices

February 24, 2015

RECON for Mac OS X quickly locates evidence of attached USB devices and more. Video by Mike Leclair, creator of the Surviving Digital Forensic Series and part… Read More

The Tale of Two .Trashes

December 4, 2014

Recently a student in our RECON – Official Training and Certification class posted this question: “A question regarding .Trashes: Which deleted data is saved on… Read More

Macintosh Forensics Best Practices

August 25, 2014

  SUMURI has compiled a guide for Macintosh Forensic Best Practices.  This document is the “Cliff Notes” version of our vendor-neutral Macintosh Forensic Survival Course… Read More