New Post: MacOS File Movements forensic4cast.com/2016/10/ma…
1
19
2
26
MacOs handles NTFS ok these days, but I have not drilled down to see how metadata is modified.
1
Replying to @sonnybrunson @brianjmoran @lee_whitfield @HECFBlog
read-only NTFS support has been in MacOS for a really long time

Oct 14, 2016 · 6:39 PM UTC

1
Replying to @hal_pomeranz @sonnybrunson @brianjmoran @HECFBlog
Read-only, yes, but I think we're all talking about write access.
1
more replies