Ryan's Site http://www.macosxforensics.com/

1. Introductions
a. George's forensics background
b. Ryan's forensics background and web site.

2. What is Forensics and What Does it mean to the typical mac user?
a. Forensics vs Data Recovery
b. Had one TMU listener worry about misuse of products like Maclockpick from Subrosasoft. http://www.MacForensicsLab.com/

3. Mac as forensic data source.
a. Does it affect handling procedures?
b. Does drive and data format complicate investigations?

4. Mac as a forensic workstation platform.
a. Commercial Tools
b. Free Tools
c. Use of Virtualization

5. What can a typical user do to protect their data in case a system is stolen or lost?
a. Encrypted Disk Image
b. File Vault (encrypted disk image of home folder)
c. Using Secure Virtual Memory
d. Whole Disc Encryption