Abstract

This talk will retrace the core anti-forensic techniques and methologies, and show how they can be applied to deafeat forensic analysis of OS X systems. More importantly, this talk will examine how an anti-forensic attacker can move beyond the file system and where anti-forensic data hiding attacks will move in the future.
This talk will include attacks against the OS X file system(HFS+), as well as attacks beyond the file system. There will be 0-day OS X bugs as well as previously unreleased attacks against Microsoft file systems.
If you are a hacker, you'll discover a new world of data storage, and if you're a forensic investigator ... be prepared to never discover anything again.