Chris Henderson & Justin Larson - OSX Archaeology
▶Chris Henderson & Justin Larson - OSX Archaeology — a 2015 SAINTCON 2015 security conference talk on dfir (51:48 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube