Testing Memory Forensics Tools for the Macintosh OS X Operating System

Mac MarshalTM: A Tool for Mac OS X Operating System and Application Forensics

Computer forensic tools for Apple Mac hardware have traditionally focused on low-level file system details. Mac OS X and common applications on the Mac platform provide an abundance of information about the user’s activities in configuration files, caches, and logs. We have developed Mac MarshalTM, an extensible tool suite for the analysis of files on Mac OS X disk images. Mac Marshal provides ...

Mac OS X Forensics

MolViewX: a molecular visualization program for the Macintosh OS X system

MolViewX is a molecular visualization tool written for the Macintosh OS X operating system. This represents a signi®cant update from a previous application, MolView (Smith, 1995), that ran on the `classic' operating system. The main purpose of this application is to bring an intuitive graphical interface to the user who only occasionally needs to view atomic structures or for classes where it i...

Testing Framework for Mobile Device Forensics Tools

The proliferation of mobile communication and computing devices, in particular smart mobile phones, is almost paralleled with the increasing number of mobile device forensics tools in the market. Each mobile forensics tool vendor, on one hand claims to have a tool that is best in terms of performance, while on the other hand each tool vendor seems to be using different standards for testing the...

Mac OS X persistent evidences for forensics purposes

Computer forensics is a discipline focused on obtaining evidences that provide a clue about how, when and who did an action over an asset. This is important in the event of attacks from intruders and malware. However, no open source forensics tools have been developed to extract the Mac OS X file persistent evidences, despite recent trend of malwares and attacks on the operating system and appl...