The Challenges of APFS and How EnCase Can Help
The new Apple File System (APFS) was developed to replace HFS+ and became the default file system in September 2017. Like many Apple technologies, APFS is significantly different from other mainstream file-systems; it presents special challenges, but also some exciting data recovery opportunities.
OpenText™ EnCase™ Forensic 8.07 now includes fundamental support for APFS, enabling targeted collection of forensic data from computers running Apple High Sierra (macOS 10.13).
Join EnCase Product Manager, Harp Thukral, and EnCase Course Developer and Instructor, Simon Key, as they share their expert knowledge of APFS and how to acquire, parse, and investigate it with EnCase.
In this webinar, you will:
- Learn about the challenges APFS poses to investigators
- Hear how EnCase developers added support for APFS
- See a demonstration of APFS support in EnCase Forensic 8.07
- Get an update of what else is new in EnCase Forensic 8.07
Harp Thukral, Product Manager, OpenText
Simon Key, Course/Curriculum Developer III, OpenText