By browsing this site, you are agreeing to our cookie policy. More Information

The Challenges of APFS and How EnCase Can Help

72 min

The new Apple File System (APFS) was developed to replace HFS+ and became the default file system in September 2017. Like many Apple technologies, APFS is significantly different from other mainstream file-systems; it presents special challenges, but also some exciting data recovery opportunities.

OpenText™ EnCase™ Forensic 8.07 now includes fundamental support for APFS, enabling targeted collection of forensic data from computers running Apple High Sierra (macOS 10.13).

Join EnCase Product Manager, Harp Thukral, and EnCase Course Developer and Instructor, Simon Key, as they share their expert knowledge of APFS and how to acquire, parse, and investigate it with EnCase.

In this webinar, you will:

  • Learn about the challenges APFS poses to investigators 
  • Hear how EnCase developers added support for APFS 
  • See a demonstration of APFS support in EnCase Forensic 8.07 
  • Get an update of what else is new in EnCase Forensic 8.07 


Harp Thukral, Product Manager, OpenText
Simon Key, Course/Curriculum Developer III, OpenText

Related Topics:
Internal Investigation , Criminal Investigation

Related Products:
EnCase Endpoint Investigator , EnCase Forensic

You May Also Like


One-Click Forensic Analysis: A SANS Review of EnCa...

SANS Instructor Jake Williams (@malwarejake) reviews EnCase Forensic 8.06, its features, and tests its capability to analyze digital forensic data. In this evaluation, SANS specifically evaluated the ...

How to Conduct Efficient Examinations with EnCase ...

EnCase Forensic (8.06) features an all-new EnCase indexing engine as well as multiple other key enhancements focused on improving processing speeds. With enhanced processing speeds, creating an index ...