Heather Mahalik and I presented on Apple Continuity artifacts at the SANS DFIR Summit. This is one of my favorite conferences of the year. I always have a good time to connect with old friends and meet new ones! This year was no different. I am looking forward to it every year. It's my DFIR summer camp.
Slides can be found here!
This research is ongoing – we add in network artifacts from Phil Hagen ! We will present it to future conferences (SANS SANSFIRE, CDI and Network Security).