Within the DFIR community, support for fundamental structures, like file systems, across tools is essential for examiners to complete their work. BlackBag has provided industry-leading support for Apple devices this past year by quickly releasing complete support for Apple’s latest file system (APFS), all of the encryption variations, and APFS Snapshots. With macOS and iOS … Continue reading A Present From Santa (APFS): Providing APFS support to The Sleuth Kit® Framework