Aller au contenu


Detection Of Backdating The System Clock In MacOS

  • Please log in to reply
No replies to this topic

#1 ungars



  • Membres
  • PipPip
  • 157 Messages :
  • Configuration:iMAC Retina 4k 3Ghz Intel i5 8 Go MAC OS High Sierra 10.13.4.
  • Sexe:Masculin

Posté 07 décembre 2019 - 15:15



un article intéressant sur un aspect peu connu de MAC OS :



Detection Of Backdating The System Clock In MacOS




Posted by Scar de Courcier

January 31, 2018

Leave a comment

by Oleg Skulkin & Igor Mikhaylov

Recently we received a good question from one of our DFIR mates: “How can one detect backdating of the system clock forensicating macOS?”. This is a really good question, at least for us, so we decided to research it. If we are talking about Windows system clock backdating there are a lot of information to help, for example, this SANS white paper by Xiaoxi Fan, but there is nothing about macOS.


0 utilisateur(s) en train de lire ce sujet

0 membre(s), 0 invité(s), 0 utilisateur(s) anonyme(s)