• Menu o Overview o Device Details • NYC024383.aff4 (Evidence ID: NYC024383.aff4 - 001) o Case Data • Calendar Items • Calls • Contacts • Messages • Top Contacts • User Accounts Device: NYC024383.aff4 -- (Evidence ID: NYC024383.aff4 - 001) Path Nolumes/CASES0I/ny-3027571_219407/Evidence/NYC024383/disk2 2019-09-20 14-51-25/NYC 024383.aff4 Type ImageFile Sector 4096 Size Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Macintosh HD Partition Type APFS File System APFS OS Version Mac OS X (10.14.5) OS Install Date Identifier 1 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2015-09-21 05:41:25 (UTC) Root File Modify Date 2019-06-12 14:01:35 (UTC) Root File Accessed Date 2019-06-12 14:00:03 (UTC) File Count 759198 Folder Count 148059 Sector Size 4096 Sector Count 1125900395170060 Total Size Space Used 34.8 GB (37365895168 Bytes) Space Available Block Sector Count 1 Last File ID 12886495270 EFTA01218980 Write Count Application Artifacts Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts Preboot APFS APFS 2 2019-02-11 20:02:23 (UTC) 2019-02-11 20:02:27 (UTC) 2019-02-11 20:02:23 (UTC) 73 18 4096 1125900395170060 43.6 MB (45760512 Bytes) 1 12884902522 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Recovery APFS APFS 3 2019-02-11 20:13:43 (UTC) EFTA01218981 Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts 2019-02-11 20:13:44 (UTC) 2019-02-11 20:13:43 (UTC) 25 3 4096 1125900395170060 486.1 MB (509730816 Bytes) 1 71 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts VM APFS APFS 4 2019-02-11 20:25:09 (UTC) 2019-07-17 18:12:08 (UTC) 2019-02-11 20:25:09 (UTC) 2 1 4096 1125900395170060 1.0 GB (1074814976 Bytes) 1 130 Initial BlackLight Case Version BlackLight 2019 Release 1.1 EFTA01218982 Volume Name Unallocated (No Volume Label) (Carved Files) Partition Type APFS File System Unallocated OS Version OS Install Date Identifier 5 Root File Create Date Root File Modify Date Root File Accessed Date File Count 309422 Folder Count Sector Size 4096 Sector Count 1125900395170060 Total Size 4.0 EB (4611688018616565760 Bytes) Space Used Space Available Block Sector Count 1 Last File ID Write Count Application Artifacts EFTA01218983