EFTA00509799.pdf

• Menu o Overview o Device Details ■ NYCO24328.aff4 (Evidence ID: NYC024328.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Top Contacts ■ User Accounts Device: NYCO24328.aff4 -- (Evidence ID: NYCO24328.aff4 - 001) Nolumes/Promise Pegasus/31E-NY-3027571/evidence/NYCO24328/diskl 2019-09-05 14-30-32/N Path YCO24328.aff4 Type ImageFile Sector 4096 Size Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Macintosh HD Partition Type APFS File System APFS OS Version Mac OS X (10.14.5) OS Install Date Identifier 1 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-09 07:41:35 (UTC) Root File Modify Date 2019-05-21 10:44:05 (UTC) Root File Accessed Date 2019-05-21 10:43:05 (UTC) File Count 1101140 Folder Count 222777 Sector Size 4096 Sector Count 977028249 Total Size Space Used 564.3 GB (605927116800 Bytes) Space Available Block Sector Count 1 Last File ID 19153215 EFTA00509799  Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Preboot Partition Type APFS File System APFS OS Version OS Install Date Identifier 2 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-26 13:33:28 (UTC) Root File Modify Date 2017-12-26 13:33:33 (UTC) Root File Accessed Date 2019-09-05 14:19:37 (UTC) File Count 77 Folder Count 26 Sector Size 4096 Sector Count 977028249 Total Size Space Used 24.6 MB (25796608 Bytes) Space Available Block Sector Count 1 Last File ID 1868 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Recovery Partition Type APFS File System APFS OS Version OS Install Date Identifier 3 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-26 13:33:31 (UTC) EFTA00509800 Root File Modify Date 2017-12-26 13:33:34 (UTC) Root File Accessed Date 2017-12-26 13:33:31 (UTC) File Count 28 Folder Count 3 Sector Size 4096 Sector Count 977028249 Total Size Space Used 486.1 MB (509743104 Bytes) Space Available Block Sector Count 1 Last File ID 246 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name VM Partition Type APFS File System APFS OS Version OS Install Date Identifier 4 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-26 13:35:29 (UTC) Root File Modify Date 2017-12-26 13:35:59 (UTC) Root File Accessed Date 2017-12-26 13:35:29 (UTC) File Count 1 Folder Count 1 Sector Size 4096 Sector Count 977028249 Total Size Space Used 64.0 GB (68719497216 Bytes) Space Available Block Sector Count 1 Last File ID 16 Write Count Application Artifacts EFTA00509801