• Menu o Overview o Device Details ■ NYC024365.aff4 (Evidence ID: NYC024365.aff4 - 001) o Case Data ■ Calendar Items ■ Calls ■ Contacts ■ Messages ■ Top Contacts ■ User Accounts User Accounts User Account Source Device NYC024365.aff4/Macintosh HD Path /Library/Preferences/com.apple.loginwindow.plist User Name root Account Type Mac Last User HashlD com.apple.loginwindow.plist:0:71317:lastusemame User Account Source Device NYC024365.aff4/Macintosh HD Path /private/var/db/dslocaUnodes/Default/users/Jeffrey.plist User ID 502 User Name Jeffrey Full Name Jeffrey Path /Users/Jeffrey Password Account Type Mac User HashlD Jeffrey.plist:0:766430 ******** User Account Source Device NYC024365.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Default/useralS User ID 501 User Name Full Name Path /Users= Password Account Type Mac User HashlD :0:766397 User Account Source Device NYC024365.aff4/Macintosh HD EFTA01215159 Path /private/var/db/dslocal/nodes/Default/users/Guest.plist User ID 201 User Name Guest Full Name Guest User Path /Users/Guest Password Account Type Mac User HashlD Guest.plist:0:766395 User Account Source Device NYCO24365.aff4/Macintosh HD Path /Library/Preferences/com.apple.preferences.accounts.plist User ID 501 User Name lsj Full Name LSJ Deleted Date 2015-01-30 16:55:14 (UTC) Account Type Mac User HashlD com.apple.preferences.accounts.plist:0:71271:Isj User Account Source Device NYCO24365.aff4/Macintosh HD Path /private/var/db/dslocal/nodes/Defaultlusers/root.plist User ID 0 User Name root Full Name System Administrator Path /var/root Password Account Type Mac User HashlD root.plist:0:766432 User Account Source Device NYCO24365.aff4/Macintosh HD Path /Users/Jeffrey/Library/Application Support/Skype/jeevacation/main.db User Name jeevacation@gmail.com Account Type Skype HashlD normalized accounts:0:1 EFTA01215160