Sat, 30 May 2009
Well, we finally got Episode 1 uploaded! We had some minor problems with sound quality, hopefully we will get those cleared up for the next episode.
You can send any comments or questions to:
Click here to send The MacDudes an e-mail
Episode 1 Show Notes (Download at: Show Notes)
Single User Mode:
GOLDEN RULE: Use OPTION key to boot ﬁrst and conﬁrm no Firmware Password
-If Firmware Password in use, power off.
(Firmware Password Options will be covered in a later podcast)
-Single User Mode can be used to ﬁnd Date/Time of the system without making
-After OPTION key boot and conﬁrmation of no ﬁrmware password
-REBOOT holding OPTION + ʻSʼ Key to boot into Single User Mode
-Will be similar to a Verbose boot
-After boot stops, type “Date” at cursor and date and time will be displayed.
-To find the make & model of the installed hard drive, look for the line that starts with "Got Boot Device"
-Can also run System Proﬁler to access information about the system
-Non-Tool Speciﬁc Mac Forensics Survival Course
-Teaches how to do Mac Forensics using Mac
-Basic and Advanced Courses being offered Internationally
-Offers both training for non-tool and Blackbag Tool Training
-Suite of Proprietary tools for using a Mac to do Mac Forensics
-Beginner, Intermediate, and Advanced Courses
-Also offers tool speciﬁc training
Purdue University: (Law Enforcement Only):
-3 day class
-Traveling Class and at the University
-Beginning and Advanced Course
-Apple Certiﬁed Support Professional (ACSP)
-Apple Certiﬁed Technical Coordinator (ACTC)
-Apple Certiﬁed System Administrator (ACSA)
-Range of Apple Software Pro Certiﬁcations as well
Plist of the Week(PLOW):
This weekʼs PLOW is: com.apple.ipod.plist
1.It is located in both Global and User: Library --> Preferences
2.Contains information about all IPod/IPhone devices connected to system.
3.Includes (not comprehensive):
a.UUID: Unique ID for the Device
b.Connected: Last Connected Date/Time
c. Device Class: IPod/IPhone
f. IMEI (IPhone)