EFTA00780319.pdf

• Menu o Overview o Device Details ■ NYC024362.aff4 (Evidence ID: NYC024362.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Top Contacts ■ User Accounts Device: NYC024362.aff4 -- (Evidence ID: NYC024362.aff4 - 001) Nolumes/Cases0 Uny-3027571_219407/Source/Evidence/NYC024362/diskl 2019-09-19 15-19-45/ Path NYC024362.aff4 Type ImageFile Sector 4096 Size Initial BlackLight Case Version BlackLight 2020 Release 1 Volume Name Macintosh HD Partition Type APFS File System APFS OS Version Mac OS X (10.14.5) OS Install Date Identifier 1 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count 1335763 Folder Count 240840 Sector Size 4096 Sector Count 977028249 Total Size Space Used 105.1 GB (112864616448 Bytes) Space Available Block Sector Count 1 Last File ID 8016874 EFTA00780319  Write Count Model iMacPro1,1 Host Name JEE-USVI-2 Serial Number C02VW3AJHX8F macOS Setup Timestamp 2018-01-11 20:11:26 (UTC) Time Zone America/St_Thomas Language en US AirDrop ID 13D70E793D0C MAC (AppleEthernetAquantiaAqtion/en0) D0:81:7A:D9:F0:0E MAC (AppleBCMWLANCore/en1) 8C:85:90:9A:A7:6E Dynamic IP 192.168.119.206 MAC (AppleThunderboltlPPort/en2) DE:00:C8:52:10:01 MAC (AppleThunderboltlPPort/en3) DE:00:C8:52:10:00 MAC (AppleThunderboltlPPort/en4) DE:00:C8:52:10:05 MAC (AppleThunderboltlPPort/en5) DE:00:C8:52:10:04 MAC (AppleUSBNCMData/en6) AC:DE:48:00:11:22 MAC (IOUserEthernetController/en7) 8C:85:90:9A:93:8F MAC (AppleUSBEthernetHostAQM/en8) E2:33:8E:E0:62:94 MAC (AppleUSBNCMData/en9) 72:48:0F:94:5E:60 Application Artifacts Initial BlackLight Case Version BlackLight 2020 Release 1 Volume Name Preboot Partition Type APFS File System APFS OS Version OS Install Date Identifier 2 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-25 16:42:26 (UTC) Root File Modify Date 2017-12-25 16:42:30 (UTC) Root File Accessed Date 2019-09-19 15:11:35 (UTC) File Count 83 Folder Count 26 Sector Size 4096 Sector Count 977028249 Total Size Space Used 42.8 MB (44888064 Bytes) Space Available EFTA00780320  Block Sector Count Last File ID 2807 Write Count Application Artifacts GJ Initial BlackLight Case Version BlackLight 2020 Release 1 Volume Name Recovery Partition Type APFS File System APFS OS Version OS Install Date Identifier 3 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-12-25 16:42:28 (UTC) Root File Modify Date 2017-12-25 16:42:32 (UTC) Root File Accessed Date 2017-12-25 16:42:28 (UTC) File Count 32 Folder Count 3 Sector Size 4096 Sector Count 977028249 Total Size Space Used 486.1 MB (509759488 Bytes) Space Available Block Sector Count Last File ID 232 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2020 Release 1 Volume Name VM Partition Type APFS File System APFS OS Version OS Install Date Identifier 4 Volume Modify Date Volume Backup Date EFTA00780321 Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count 0 Folder Count I Sector Size 4096 Sector Count 977028249 Total Size Space Used 20.0 KB (20480 Bytes) Space Available Block Sector Count I Last File ID 2 Write Count Application Artifacts EFTA00780322