Josh Lemon
@joshlemon
Chief DIFR at @SoteriaSec_io | @SANSInstitute Principal Instructor & Author | Digital Forensics & Incident Response geek
ID: 76863524
https://joshlemon.com.au 24-09-2009 05:19:08
2,2K Tweet
2,2K Followers
1,1K Following
One of my students from a #FOR508 class I taught took some of my initial research on #macOS #timestamps and found macOS updates timestamps differently for different file types as well 🤯 If you do macOS #DFIR work, this is definitely worth a read. 🔗 forensicatorjourney.gitbook.io/d.forensicator…
