Guide
MacOS Mail Messages And Notes Forensics
17 pages · 25 min read
- Apple and macOS forensics
§ Guide topic
Apple and macOS forensics
14 practical guides on Apple and macOS forensics for UK litigators, in-house counsel and investigators. Read every page online or download the PDF, free and without registration.
Ref · E-D · 2026 · §TPCClass · ConfidentialJuris · England & WalesStatus · Active
14 practical guides on Apple and macOS forensics, written for UK litigators, in-house counsel and investigators handling disclosure and digital evidence, and every guide can be read in full on its own page or downloaded as a PDF, free and without registration.
§ Questions visitors ask about Apple and macOS forensics
§ 14 guides on Apple and macOS forensics
Ask The Library about Apple and macOS forensicsGuide
Apple Mail Archives And Email Threading On MacOS
17 pages · 25 min read
- Processing and review
- Email evidence
- Apple and macOS forensics
Guide
MacOS Enterprise Management And MDM Artefacts
19 pages · 27 min read
- Apple and macOS forensics
Guide
Time Machine And MacOS Backup Analysis
17 pages · 26 min read
- Apple and macOS forensics
Guide
MacOS Spotlight And Metadata Deep Dive
17 pages · 26 min read
- Apple and macOS forensics
- Metadata and timestamps
Guide
Safari And Browser Artefacts On MacOS
17 pages · 25 min read
- Apple and macOS forensics
Guide
Apple Watch And Paired Device Forensics
18 pages · 25 min read
- Apple and macOS forensics
Guide
Gatekeeper XProtect And MacOS Malware Artefacts
17 pages · 27 min read
- Apple and macOS forensics
- Cyber incidents and ransomware
Guide
FileVault The Secure Enclave And Apple Encryption
17 pages · 27 min read
This guide, 'File Vault The Secure Enclave And Apple Encryption', is prepared by Computer Forensics Lab's e-discovery team for UK lawyers, in-house counsel, and investigators.
- Apple and macOS forensics
- Encryption and access
Guide
BitLocker FileVault And Full Disk Encryption
17 pages · 27 min read
This guide, "Bit Locker, File Vault and Full-Disk Encryption", is prepared by Computer Forensics Lab's e-Discovery team for UK lawyers.
- Apple and macOS forensics
- Encryption and access
Guide
APFS And The Apple File System
17 pages · 25 min read
This guide, 'APFS and the Apple File System', covers how APFS, the file system on modern Mac, iPhone, and iPad devices, uses copy-on-write, snapshots, and clones.
- Apple and macOS forensics
Guide
MacOS And Apple Silicon Forensics
17 pages · 26 min read
This guide, 'macOS and Apple Silicon Forensics', is for UK lawyers, in-house counsel and investigators dealing with modern Apple Mac computers.
- Apple and macOS forensics
Guide
MacOS System Artefacts
17 pages · 26 min read
This guide, 'macOS System Artefacts', is for UK lawyers, in-house counsel, and investigators.
- Apple and macOS forensics
Guide
Mac Evidence In Litigation
18 pages · 23 min read
This guide, 'Mac Evidence in Litigation', covers the complexities of digital forensics for macOS in UK legal contexts.
- Apple and macOS forensics
§ Other topics
- Mobile and messaging evidence (24)
- Forensic collection and imaging (21)
- Electronic disclosure practice (20)
- Deleted data and recovery (13)
- Cloud evidence (10)
- Chain of custody and defensibility (8)
- Servers, NAS and virtual environments (8)
- Custodians and data mapping (7)
- Expert evidence and reports (7)
- Metadata and timestamps (7)
- Open source, web and log evidence (7)
- Encryption and access (6)
- Data theft and exfiltration (5)
- Disclosure and PD 57AD (5)
Instruct the practice
Bring us in early.
Defensibility is built, not retrofitted.
Whether you are responding to a regulator, preparing for disclosure, or scoping an internal investigation, start the chain of custody with a short, confidential conversation.