Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20110

General Discussion: MAC os:"Shell bags"

$
0
0
nightworker wrote: what you mean mac ,mac as timastamp , mac as device adress if it time stamp yes it is but device adress is only lnk filesMAC as MACIntosh? I bet that the question is actually <img src="images/smiles/icon_confused.gif" alt="Confused" title="Confused" /> : Quote:: Is there in MacOSX any structure similar to Windows ShellBags from which one can determine if the computer was connected to a USB external mass storage device? If yes, what are them and which tool can be used to analyse them? jaclaz

Viewing all articles
Browse latest Browse all 20110

Trending Articles