• Menu
o Overview
o Device Details
• NYC024383.aff4
(Evidence ID: NYC024383.aff4 - 001)
o Case Data
• Calendar Items
• Calls
• Contacts
• Messages
• Top Contacts
• User Accounts
Device:
NYC024383.aff4
-- (Evidence ID:
NYC024383.aff4
- 001)
Nolumes/CASES0I/ny-3027571_219407/Evidence/NYC024383/disk2 2019-09-20 14-51-25/NYC
Path
024383.aff4
Type ImageFile
Sector
4096
Size
Initial BlackLight Case Version BlackLight 2019 Release 1.1
Volume Name Macintosh HD
Partition Type APFS
File System APFS
OS Version Mac OS X (10.14.5)
OS Install Date
Identifier 1
Volume Modify Date
Volume Backup Date
Volume Checked Date
Root File Create Date 2015-09-21 05:41:25 (UTC)
Root File Modify Date 2019-06-12 14:01:35 (UTC)
Root File Accessed Date 2019-06-12 14:00:03 (UTC)
File Count 759198
Folder Count 148059
Sector Size 4096
Sector Count 1125900395170060
Total Size
Space Used 34.8 GB (37365895168 Bytes)
Space Available
Block Sector Count 1
Last File ID 12886495270
EFTA01218980
Write Count
Application Artifacts
Initial BlackLight Case Version BlackLight 2019 Release 1.1
Volume Name Preboot
Partition Type APFS
File System APFS
OS Version
OS Install Date
Identifier 2
Volume Modify Date
Volume Backup Date
Volume Checked Date
Root File Create Date 2019-02-11 20:02:23 (UTC)
Root File Modify Date 2019-02-11 20:02:27 (UTC)
Root File Accessed Date 2019-02-11 20:02:23 (UTC)
File Count 73
Folder Count 18
Sector Size 4096
Sector Count 1125900395170060
Total Size
Space Used 43.6 MB (45760512 Bytes)
Space Available
Block Sector Count 1
Last File ID 12884902522
Write Count
Application Artifacts
Initial BlackLight Case Version BlackLight 2019 Release 1.1
Volume Name Recovery
Partition Type APFS
File System APFS
OS Version
OS Install Date
Identifier 3
Volume Modify Date
Volume Backup Date
Volume Checked Date
Root File Create Date 2019-02-11 20:13:43 (UTC)
EFTA01218981
Root File Modify Date 2019-02-11 20:13:44 (UTC)
Root File Accessed Date 2019-02-11 20:13:43 (UTC)
File Count 25
Folder Count 3
Sector Size 4096
Sector Count 1125900395170060
Total Size
Space Used 486.1 MB (509730816 Bytes)
Space Available
Block Sector Count 1
Last File ID 71
Write Count
Application Artifacts
Initial BlackLight Case Version BlackLight 2019 Release 1.1
Volume Name VM
Partition Type APFS
File System APFS
OS Version
OS Install Date
Identifier 4
Volume Modify Date
Volume Backup Date
Volume Checked Date
Root File Create Date 2019-02-11 20:25:09 (UTC)
Root File Modify Date 2019-07-17 18:12:08 (UTC)
Root File Accessed Date 2019-02-11 20:25:09 (UTC)
File Count 2
Folder Count 1
Sector Size 4096
Sector Count 1125900395170060
Total Size
Space Used 1.0 GB (1074814976 Bytes)
Space Available
Block Sector Count 1
Last File ID 130
Write Count
Application Artifacts
Initial BlackLight Case Version BlackLight 2019 Release 1.1
EFTA01218982
Volume Name Unallocated (No Volume Label) (Carved Files)
Partition Type APFS
File System Unallocated
OS Version
OS Install Date
Identifier 5
Root File Create Date
Root File Modify Date
Root File Accessed Date
File Count 309422
Folder Count
Sector Size 4096
Sector Count 1125900395170060
Total Size 4.0 EB (4611688018616565760 Bytes)
Space Used
Space Available
Block Sector Count 1
Last File ID
Write Count
Application Artifacts
EFTA01218983