un article intéressant sur un aspect peu connu de MAC OS :
Detection Of Backdating The System Clock In MacOS
Posted by Scar de Courcier⋅January 31, 2018
by Oleg Skulkin & Igor Mikhaylov
Recently we received a good question from one of our DFIR mates: “How can one detect backdating of the system clock forensicating macOS?”. This is a really good question, at least for us, so we decided to research it. If we are talking about Windows system clock backdating there are a lot of information to help, for example, this SANS white paper by Xiaoxi Fan, but there is nothing about macOS.