While I won’t re-invent the wheel on describing “What is a . ” (here as well), I would like to highlight its possible use for DFIR in containing/referencing artifacts that may be useful to investigations – traces of deleted files, with filenames and sometimes paths! DS_Store file stores metadata used by Finder for folder-specific display options such as window placement, layout, custom icons, background, etc. DS_Store files are (theoretically) created in every folder that Finder accesses, even remote network shares and external devices. DS_Store files you see in Windows on your FAT32-formatted thumb drive making more sense now?
A part of this metadata is the filename, which got me to thinking…
The result of this is that if I have had hidden files visible anytime since the last restart of Box Sync, the status indicators for any folder I've looked at but not changed is erroneous.
After all, Ember Data is still pre-release and these methods may continue to be in flux. As a guy coming from a Natural Resources background, learning web development is proving to be a steep learning curve.
Ember really looks to be the way to go for many of the ideas floating around in my head. As with all classes on Code School, the course will specify what version of Ember.js, and its dependencies, the course is based on.
However, up until this course, none of it made any sense. The real limitation is my ability to wrap my head around it fast enough. If it hasn't already, being a new course, it will soon.
In this case, I'm sure the version of Ember Data will be specified on the course page soon (if it hasn't already) given its unstable status at this time.