Do you have access to any other forensic tools such as EnCase or FTK? Both of these will include the ability to parse internet browser related artifacts.
Alternatives, could be
1) Net Analysis by ...

So what your asking is, can the login keychain be broken by (basically) free software... Apple hold the login keychain in high esteem with good security, albeit it can be open by another Mac if you k ...

I think the questions here are:

1) What type of Mac are you trying to acquire?
2) Does it have a T2 chip?
3) Is the Mac live or turned off?

It might be that a free solution is not suitable, an ...

Hi,

Have you tried using EnCase 8 (8.05 or above) to acquire the device.
Mobile support is included in EnCase, where installing a driver pack accessible from Opentext MySupport is a requirement.
...

Hi,

How does the time and date in artifact view correspond to that of the “File Deleted” time and date stamp column of the main table view for entries?

Also Case Analyzer can provide a view ...

Hi,

Can I ask where are you viewing the deleted time and date?

Also have you set the timezone for the piece of evidence (prior to running the evidence processor)?

Further if you look at the " ...

Hi,

If you have log files (or any file) outside of an evidence (image) file, you can introduce those to EnCase as “single files” just by “dragging and dropping” them into EnCase.

They wi ...