e Menu ° Overview =» NYC024329.aff4 (Evidence ID: NYC024329.aff4 - 001) © Case Data = Calendar Items = Calls Contacts Messages Notes Top Contacts User Accounts Device: NYC024329.aff4 -- (Evidence ID: NYC024329.aff4 - 001) Path /Volumes/Promise Pegasus/3 1 E-NY-302757 L/evidence/NYC024329/disk1 2019-07-20 16-08-03/N YC024329.aff4 Type —ImageFile Sector Size 4096 Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Macintosh HD Partition Type APFS File System APFS OS Version Mac OS X (10.14.5) OS Install Date Identifier 1 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2016-01-14 04:30:05 (UTC) Root File Modify Date 2019-05-24 06:17:22 (UTC) Root File Accessed Date 2019-05-24 06:16:10 (UTC) File Count 1122499 Folder Count 275348 Sector Size 4096 Sector Count 61228134 Total Size Space Used 151.3 GB (162495197184 Bytes) Space Available Block Sector Count 1 EFTA00510009

--=PAGE_BREAK=--

Last File ID 8599329440 Write Count Application Artifacts les Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Preboot Partition Type APFS File System APFS OS Version OS Install Date Identifier 2 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-11-13 03:23:10 (UTC) Root File Modify Date 2017-11-13 03:23:11 (UTC) Root File Accessed Date 2017-11-13 03:23:10 (UTC) File Count 74 Folder Count 18 Sector Size 4096 Sector Count 61228134 Total Size Space Used 40.1 MB (42082304 Bytes) Space Available Block Sector Count 1 Last File ID 2405 Write Count Application Artifacts Ps Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Recovery Partition Type APFS File System APFS OS Version OS Install Date Identifier 3 Volume Modify Date Volume Backup Date Volume Checked Date EFTA00510010

--=PAGE_BREAK=--

Root File Create Date 2017-11-13 03:23:10 (UTC) Root File Modify Date 2017-11-13 03:23:11 (UTC) Root File Accessed Date 2017-11-13 03:23:10 (UTC) File Count 29 Folder Count 3 Sector Size 4096 Sector Count 61228134 Total Size Space Used 486.1 MB (509751296 Bytes) Space Available Block Sector Count 1 Last File ID 241 Write Count Application Artifacts Ps Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name VM Partition Type APFS File System APFS OS Version OS Install Date Identifier 4 Volume Modify Date Volume Backup Date Volume Checked Date Root File Create Date 2017-11-13 03:40:58 (UTC) Root File Modify Date 2019-07-20 16:00:09 (UTC) Root File Accessed Date 2017-11-13 03:40:58 (UTC) File Count 3 Folder Count 1 Sector Size 4096 Sector Count 61228134 Total Size Space Used 4.0 GB (4294987776 Bytes) Space Available Block Sector Count 1 Last File ID 1261 Write Count Application Artifacts lp EFTA00510011

--=PAGE_BREAK=--

Initial BlackLight Case Version BlackLight 2019 Release 1.1 Volume Name Partition Type File System OS Version OS Install Date Identifier Root File Create Date Root File Modify Date Root File Accessed Date File Count Folder Count Sector Size Sector Count Total Size Space Used Space Available Block Sector Count Last File ID Write Count Application Artifacts Ps Unallocated (No Volume Label) (Carved Files) APFS Unallocated 39639 4096 61228134 233.6 GB (250790436864 Bytes) EFTA00510012