BlackLight quickly analyzes computer volumes and mobile devices. It sheds light on user actions and now even includes analysis of memory images. BlackLight allows for easy searching, filtering and otherwise sifting through large data sets. It can logically acquire Android and iPhone/iPad devices, runs on Windows and Mac OS X, and can analyze data from all four major platforms within one interface. It’s simply the best option available for smart, comprehensive Analysis.
Presentation: 30min – Acquisition and Decrypting File Vault APFS Volumes
Workshop: 110min – Acquisition and Analysis of APFS in a Windows or Mac environment
For the workshop you will need a laptop with the software BlackBag 3.1 installed. If you have not installed it yet, please fill in your e-mail address in this form and you will receive an automatic e-mail with the download instructions as well as a demo key for activating the software (validation: 15 days) and another download link for the sample file you will work with in the workshop.