Stabeler.com

Mac forensics

Posted: Wed 13th Jun 2007@19:53

I don't often come across Mac's in computer forensics, perhaps because I have only limited experience, but today I got to take apart a fancy G5 Imac, the one which seems to be a computer embedded into a thick flat-screen.

Having been told by Tom, Geffy and perhaps Luke that Mac's were like amazing futuristic machines with fancy design powers and stuff, in the same way that that PC's resemble babbages difference engine, and are powered by steam; I expected to see some wonderous contraptions within the body of the beast, perhaps powered by magic crystals and maybe even a Berylium sphere or two, all coupled together by lasers! Alas, the innards were less like under the hood of the Enterprise, but more, well, like a standard PC squashed a little like a Laptop, but with a standard sized SATA hard drive, but only with a strange extra sensor stuck to the side (perhaps a heat or motion sensor?).

Just as boring was the fact that the filesystem of teh mac, was easily readable, and I didn't have to get my trusty Hex editor out to fathom how the file system worked (yeah like i'd know how to do that anyway! lol).