CYS 663 SEU Macintosh Forensics Report
In this assignment, you assume the role of a forensic investigator for the DigiFirm Investigation Company. One of your clients is a small music production company. One day you receive a phone call from Andrea, the owner and president of the music company.
Andrea believes one of her employees, a sound technician, has been stealing intellectual property from the company. She thinks he is copying original music scores and then selling them to upstart musicians, claiming that he wrote them. Andrea checked the employee’s computer the previous night and thinks he has been deleting the files to cover his tracks.
Andrea’s employee uses a Macintosh computer. There are several tools available for recovering files that have been deleted from a Mac, including:
- Mac Keeper Files Recovery (https://mackeeper.com/)
- Mac Data Recovery (http://www.recovering-deleted-files.net/recovery-software/mac-data-recovery)
- Recuva for Mac (http://www.recuvaformac.com/)
Although all of these tools accomplish the same goal, each has one or more unique features. You should consider the full capability set of each tool when gathering information and determine which tool would be the best choice for the scenario in this assignment.
You will research three tools that can aid in recovering deleted Macintosh files and write a paper about their capabilities. You must also recommend one product for use in this case and justify your recommendation.
