Hunting Hackers Using Autopsy on a macOS Image

Join us as we forensically investigate this interesting scenario that often leads to rabbit holes, red herrings, canards and wild goose chases. Introduction In this scenario, we've received an image of a USB thumb drive (orig_128mb_image.dd) confiscated from the hacker's backpack. It was literally sewn in the lining of the....