RE: Mac Forensics

["Christopher Carpenter" <ccarpenter () dswa net>]

I believe EnCase (http://www.guidancesoftware.com/) will handle Mac
partitions and data recovery.

Keep in mind that if the data was overwritten, it will be much more
difficult to recover.

Chris

-----Original Message-----
From: Even [mailto:fluxster () gmail com] 
Sent: Friday, April 21, 2006 9:20 AM
To: security-basics () securityfocus com
Subject: Mac Forensics

Hi list,
I'm after some pointers on recovering the browsing history from a mac,
the history has been wiped so will need to be undeleted. I know how i
would go about this on a windows pc but have never done it on a mac
before.
All help advice would be great. I know a proxie/transparent cache
 would stop me needing to do this but it's for a computer form another
company.
Thanks
 E

-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------