regf

Every Registry file starts with a 4,096 byte header block.¬†The first 512 […]

Registry Overview

The first step to forensic analysis of the Registry is knowing where […]

MRU

There are a plethora of keys in the Registry dedicated to telling […]

Plists

Plist files are found sprinkled throughout OS X and iOS and contain the various configuration settings and other information of use to the OS and applications.