Ask the Expert: Analyzing Data From iCloud File Sharing

Apple’s iCloud Drive is a valuable means of storing data in the cloud and making it accessible to all your iCloud connected devices.  However, users were unable to share data directly from their iCloud Drive to other users; that is until recently. 

With the release of macOS10.15.4 and iOS13.4, users can now select files and folders within their iCloud Drive and share them directly with other users. 

How does sharing files and folders through iCloud Drive impact on your forensic examinations?  The results may surprise you.

Join Bruce Hunter, BlackBag’s Senior Forensic Engineer, as he demonstrates how to determine if a file or folder has been shared using iCloud.

About our BlackBag Presenter:

Bruce Hunter, Senior Forensic Engineer

Bruce retired after 29 years of policing split between Toronto and Guelph Police Departments in Ontario, Canada. Bruce worked in several investigative units throughout his career including; General Investigations, Youth Crime, Gangs/Street Crime, Sexual Assault and Child Abuse. He was instrumental in creating the Internet Child Exploitation and Technological Crimes Unit at the Guelph Police. Bruce has testified at court on both numerous Child Exploitation and Computer/Mobile Forensics cases and has been declared an expert in a number of fields in Ontario, and New York. Bruce has lectured and presented at a number of forensic and legal conferences.