macOS Forensics: The Basics

Walkthrough summary

macOS Forensics: The Basics TryHackMe walkthrough with 13 answered prompts and lab methodology notes.

Sample prompts covered

• In which year was the APFS file system introduced by Apple?
  Open the walkthrough page to inspect the full answer and command flow.
• Which file system is common amongst all Apple devices, including iOS, watchOS, and tvOS?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the latest date that the HFS+ file system supports? Format DD/MM/YYYY
  Open the walkthrough page to inspect the full answer and command flow.
• In the HFS+ file system, which file contains a list of all the files and directories present in the file system?
  Open the walkthrough page to inspect the full answer and command flow.
• In macOS, which command can be used to list all available APFS volumes?
  Open the walkthrough page to inspect the full answer and command flow.