Overview of Mac system security and its impact on digital forensics process

摘要

Nowadays there are 3 main operating systems used, and Mac OS is one of them. Until now Apple published many iterations of their operating system and with that introduced many new features that are related to system security. Even though security-related changes go unnoticed, in the world of digital forensics this presents a challenge. Today encryption can be implemented on both, hardware and software level, which can make imaging Mac OS difficult. Besides, security which is meant to protect, user data is also used by criminals to restrict access to their computers. This paper will focus on the differences and problems that occur while creating a forensic image and extracting data from Mac OS. On top of that this paper will depict the impact devices equipped with “T1” or “T2” security chip have on digital forensic process and remediation methods.