Why APFS Snapshots Change Everything in Mac Forensics
And why timing matters more than you think APFS snapshots are one of the most
V26.0 IS HERE
Not an update. A complete rebuild for modern Mac forensics.
Built to acquire and triage today’s Macs, including Apple Silicon and the latest macOS systems. A fully native macOS forensic platform. No ports. No reverse engineering.
Master Mac Forensics — From First Click to Final Report
Secure your spot today with SUMURI — where Mac forensics experts are made. CFME Certification, Included at no cost for 101 and 201 graduates — validate your expertise with a recognized credential.
Master Mac Forensics
From First Click to Final Report
Best Practices in Mac Forensics
Learn how to properly triage, image, and analyze macOS systems from start to finish.
Advanced Practices in Mac Forensics
Gain hands-on experience with advanced artifacts and examination techniques.
CFME Certification
Included at no cost for 101 and 201 graduates — validate your expertise with a recognized credential.
Secure your spot today with SUMURI — where Mac forensics experts are made!
Master Mac Forensics — From First Click to Final Report
MFSC 101: Best Practices in Mac Forensics
Learn how to properly triage, image, and analyze macOS systems from start to finish.
MFSC 201: Advanced Practices in Mac Forensics
Gain hands-on experience with advanced artifacts and examination techniques
CFME Certification: Included at no cost for 101 and 201 graduates — validate your expertise with a recognized credential.
Secure your spot today with SUMURI — where Mac forensics experts are made!
RECON ITR v26.0
Master Mac Forensics
OpenText Forensic Tools
Mac Forensics Best Practice Guide
2026 Techno Security East Conference
OUR MISSION
To provide the forensic community with unique and relevant digital forensic solutions while adhering to our core values of honor, integrity, loyalty, positive attitude, dedication and most important above all – altruism.
NEWS AND BLOGS
What Your Mac Forensic Tool Isn’t Telling You About Metadata
The critical gap between xattrs and Spotlight In the world of macOS forensics, metadata is
The MacBook Neo A18 Pro: A Forensic Deep Dive
Architectural shifts and the future of macOS examinations The release of the MacBook Neo is
Why APFS Snapshots Change Everything in Mac Forensics
And why timing matters more than you think APFS snapshots are one of the most
