I have been doing testing with MacOS 10.11, El Capitan. Specifically I wanted to see if erasing a disk or disk partition using DiskUtil would leave a DiskUtil.log as it did in previous versions of MacOS. So far I have been unable to cause a DiskUtil.log to get created. I have read that DiskUtil has
MetaDiver v2.1.6 has been released. This build fixes a bug in email mappings. Download
In the DFIR (Digital Forensic and Incident Response) space there are always interesting things happening. Change is constant and sometimes exhausting. I’m taking a quick break from working on my presentation for CEIC 2015 on improving external forensic analysis and finishing up my chapter for the new version of Hacking Exposed Computer Forensic’s book to
MetaDiver 2.0 is finally here. I hope to drop the release the alpha of 2.0 tomorrow in Downloads! This is a huge list of features and changes for MetaDiver. It’s been a LOT of work but a lot of fun and much of the research that has gone into the code has been hugely beneficial