Resources for HFS+ Forensics
Reference sheet used in the SANS FOR518 - Mac Forensic Analysis Class
(http://www.sans.org/course/mac-forensic-analysis)
- Contains HFS Plus File System Structures/OS X Commands/etc.
Grammars can be used with Synalyze It! or Hexinator
OS X: https://www.synalysis.net/
Windows/Linux: https://hexinator.com/