Ask An Expert: How Will APFS Impact My Investigations?
As BlackBag prepares to release our updated MacQuisition and BlackLight tools with APFS support we want to help examiners get familiar with the file system. In this session Dr. Sylve will cover what you need to know to identify and work with APFS volumes - including what copy-on-write and pooled storage mean for recovery.