New Presentation! 'The Cider Press: Extracting Forensic Artifacts from Apple Continuity'

Heather Mahalik and I presented on Apple Continuity artifacts at the SANS DFIR Summit. This is one of my favorite conferences of the year. I always have a good time reconnecting with old friends and meeting new ones! This year was no different. I look forward to it every year. It is my DFIR summer camp.

Slides can be found here!

This research is ongoing - we're adding in network artifacts from Phil Hagen! We will present it at future conferences (SANS SANSFIRECDI, and Network Security).

© Sarah Edwards [ and] 2016
Unauthorized use and/or duplication of this material without express and written permission from this blog’s author
and/or owner is strictly prohibited. Excerpts and links may be used, provided that full and clear credit is given
to Sarah Edwards and [ and with appropriate and specific direction to the original content.
Opinions expressed on this site of that of Sarah Edwards and no one else unless explicictly stated.