MAC (Machine Access Control)
addresses, 419, 422–3, 427
other sources of, 431–2
times, 313
Macintosh, 323
desktop, 330
e-mail, 333
file systems, 323–6
traces, 328–31
HFS and HFS Plus (HFS+) file systems, 202, 323, 327
operating system see Mac OS
Macintosh systems
data recovery, 327–8
network storage, 334
overview of digital evidence processing tools, 326
Web Activity, 331
MacOS, 197
MacOS 9, 334
date-time stamp behavior on, 328
MacOS X, 326–7, 334
Mactime, 312
MagicCookie, 332
Mandrake (mdk) Linux machine, 402
Maresware, 28, 264, 297, 627, 629
bates no utility, 643
Master Boot Record (MBR), 202
Master File Table (MFT), 260
Maury, Roy Travis, 155–8, 162
Maximum Transfer Units (MTU), 430
Mayo, Troy A., 507
MD5 value, 219, 226, 234, 273, 299, 397
Media access control (MAC), 362, 374
address, 669
Media containing digital evidence, 134
Melissa virus, 237
Message digests, 218–20, 669
black box concept of, 219
Metacrawler, 492
Metadata, 273
Metasearch engines, 492
Method of approach, 666
and control, 132–3
MFT entries, 261
Michigan v. Miller 2002, 170
Microsoft:
anti-trust case, 33
Internet Authentication Server (IAS), 459
Internet Information Server (IIS), 403, 413, 530
Internet News, 281
Microsoft Foundation Class (MFC), 353
Microsoft Word/Excel files encrypted, 270
Miller court, 48
test for obscenity, 57
MIME encoded e-mail attachments, 437, 439
MIN (Mobile Identification Number), 369
Mitnick, Kevin, 453
Mixmaster, 499
MO see Modus operandi
Mobile phones, 13, 337, 351–2
Mobile Satellite Systems (MMS), 370
Model, 5, 190
Modem:
logs on the computer, 100
see also modulator/demodulator
ModemLog.txt, 278
Modified Frequency Modulation (MFM), 200
modulator/demodulator, 662
Modus operandi (MO), 149–50, 670
automated and dynamic, 549–9
concept of, 127
motive, and technology, 145
and signature-related behavior, 552
Motion picture industry, 60
Motivational typology, 668
Motivations of rapists, 157
Motive, 668
and technology, 158–66
Mount command, 471
Mozilla, 402–3
MTA (Message Transfer Agents), 503
Mtime, 294
Multiuser Domains, 486