• Menu o Overview o Device Details ■ NYCO24329.aff4 (Evidence ID: NYC024329.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Notes ■ Top Contacts ■ User Accounts Device: NYCO24329.aff4 -- (Evidence ID: NYCO24329.aff4 - 001) Path Type ImageFile Sector Size Nolumes/Promise Pegasus/31E-NY-3027571/evidence/NYCO24329/diskl 2019-07-20 16-08-03/N YCO24329.aff4 4096 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Macintosh HD APFS APFS Mac OS X (10.14.5) 1 2016-01-14 04:30:05 (UTC) 2019-05-24 06:17:22 (UTC) 2019-05-24 06:16:10 (UTC) 1122499 275348 4096 61228134 151.3 GB (162495197184 Bytes) 1 EFTA00510009 Last File ID 8599329440 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts Preboot APFS APFS 2 2017-11-13 03:23:10 (UTC) 2017-11-13 03:23:11 (UTC) 2017-11-13 03:23:10 (UTC) 74 18 4096 61228134 40.1 MB (42082304 Bytes) 2405 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Recovery APFS APFS 3 EFTA00510010 Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts 2017-11-13 03:23:10 (UTC) 2017-11-13 03:23:11 (UTC) 2017-11-13 03:23:10 (UTC) 29 3 4096 61228134 486.1 MB (509751296 Bytes) 1 241 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts VM APFS APFS 4 2017-11-13 03:40:58 (UTC) 2019-07-20 16:00:09 (UTC) 2017-11-13 03:40:58 (UTC) 3 1 4096 61228134 4.0 GB (4294987776 Bytes) 1 1261 EFTA00510011 Initial l31aekLight Case Version BlackLight 2019 Release 1.1 Volume Name Unallocated (No Volume Label) (Carved Files) Partition Type APFS File System Unallocated OS Version OS Install Date Identifier 5 Root File Create Date Root File Modify Date Root File Accessed Date File Count 39639 Folder Count Sector Size 4096 Sector Count 61228134 Total Size 233.6 GB (250790436864 Bytes) Space Used Space Available Block Sector Count 1 Last File ID Write Count Application Artifacts EFTA00510012