EFTA00510009.pdf

• Menu o Overview o Device Details ■ NYCO24329.aff4 (Evidence ID: NYC024329.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Notes ■ Top Contacts ■ User Accounts Device: NYCO24329.aff4 -- (Evidence ID: NYCO24329.aff4 - 001) Nolumes/Promise Pegasus/31E-NY-3027571/evidence/NYCO24329/diskl 2019-07-20 16-08-03/N Path YCO24329.aff4 Type ImageFile Sector 4096 Size Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Macintosh HD Partition Type APFS File System APFS OS Version Mac OS X (10.14.5) OS Install Date Identifier 1 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2016-01-14 04:30:05 (UTC) Root File Modify Date 2019-05-24 06:17:22 (UTC) Root File Accessed Date 2019-05-24 06:16:10 (UTC) File Count 1122499 Folder Count 275348 Sector Size 4096 Sector Count 61228134 Total Size Space Used 151.3 GB (162495197184 Bytes) Space Available Block Sector Count 1 EFTA00510009  Last File ID 8599329440 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Preboot Partition Type APFS File System APFS OS Version OS Install Date Identifier 2 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-11-13 03:23:10 (UTC) Root File Modify Date 2017-11-13 03:23:11 (UTC) Root File Accessed Date 2017-11-13 03:23:10 (UTC) File Count 74 Folder Count 18 Sector Size 4096 Sector Count 61228134 Total Size Space Used 40.1 MB (42082304 Bytes) Space Available Block Sector Count Last File ID 2405 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Recovery Partition Type APFS File System APFS OS Version OS Install Date Identifier 3 Volume Modify Date Volume Backup Date Volume Checked Date EFTA00510010  Root File Create Date 2017-11-13 03:23:10 (UTC) Root File Modify Date 2017-11-13 03:23:11 (UTC) Root File Accessed Date 2017-11-13 03:23:10 (UTC) File Count 29 Folder Count 3 Sector Size 4096 Sector Count 61228134 Total Size Space Used 486.1 MB (509751296 Bytes) Space Available Block Sector Count 1 Last File ID 241 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name VM Partition Type APFS File System APFS OS Version OS Install Date Identifier 4 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-11-13 03:40:58 (UTC) Root File Modify Date 2019-07-20 16:00:09 (UTC) Root File Accessed Date 2017-11-13 03:40:58 (UTC) File Count 3 Folder Count 1 Sector Size 4096 Sector Count 61228134 Total Size Space Used 4.0 GB (4294987776 Bytes) Space Available Block Sector Count 1 Last File ID 1261 Write Count Application Artifacts EFTA00510011 Initial l31aekLight Case Version BlackLight 2019 Release 1.1 Volume Name Unallocated (No Volume Label) (Carved Files) Partition Type APFS File System Unallocated OS Version OS Install Date Identifier 5 Root File Create Date Root File Modify Date Root File Accessed Date File Count 39639 Folder Count Sector Size 4096 Sector Count 61228134 Total Size 233.6 GB (250790436864 Bytes) Space Used Space Available Block Sector Count 1 Last File ID Write Count Application Artifacts EFTA00510012