New Apple laptop wi...
 
Notifications
Clear all

New Apple laptop without thunderbolt

10 Posts
7 Users
0 Likes
449 Views
(@c-wawrentowicz)
Posts: 26
Eminent Member
Topic starter
 

I have got new Apple laptop without thunderbolt port . I have to image disk or read data from disk. First I used KALI linux on pendrive to boot this laptop but there was black screen after booting from EFI (retina ?). I prepared WinPe 10 to boot Windows but in Windows I do not see disk. I tried to install Paragon hfs+ but in this version PE I get message about some problem with DLL file. I am looking for method of reading this data
This laptop has got only one USB-C port

 
Posted : 23/09/2017 8:32 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
 

Try this

http//www.belkin.com/us/p/P-F2CD081/

 
Posted : 24/09/2017 6:16 am
(@athulin)
Posts: 1156
Noble Member
 

I have got new Apple laptop without tunderbolt port .

Perhaps you might say exactly what laptop or hardware you have? I've tried to identify new Apple laptops with only USB, but I don't seem to come up with any answers in a reasonable time. But perhaps I misunderstand 'new', or perhaps it's a model that isn't sold where I live.

You might also add some account of how you verified that the preconditions for booting the way you did are fulfilled. Do you know that the USB socket works, to begin with? Do you have a stable and clean power supply? Do you know that there are no hardware memory problems? Have you run Apple Diagnostics or equivalent – that should probably be one of the first things to do when things go wrong in unexplained ways.

I have to image disk or read data from disk. First I used KALI linux on pendrive to boot this laptop but there was black screen after booting from EFI (retina ?).

So … are you using a good Kali release? One that does do EFI booting? Were you following the instructions for EFI booting on the KALI web site? Are you using rEFInd? Have you done this before – that is, booted Kali on a Apple system?

Does the pendrive boot on another platform? I mean, it's not the pendrive or the image on it that is faulty?

I prepared WinPe 10 to boot Windows but in Windows I do not see disk.

I assume you're saying that the disk does not show up in the Disk Management console.

And what does the Windows system logs say? Any interesting errors, warnings or other messages? There should be something …

I tried to install Paragon hfs+ but in this version PE I get message about some problem with DLL file.

And? A 'message about some problem' is perhaps the most unhelpful information you can provide, as it doesn't tell us anything at all that is relevant to the problem.

(It does tell me that you almost certainly do not keep a proper log of what you are doing. I'm afraid that's a bad sign. Is this a professional assignment, or are you a student?)

I am looking for method of reading this data

The general impression I get is that you tried something, it failed, you tried something new, and it too failed. Perhaps you just tried to keep the posting short, and omitted things you think are obvious.

You may need to be a more persistent. From your account, I see no indication of what you did when you failed what troubleshooting did you do, what adjustments to your approach did you do … and so on. For example, what did you do once you suspected that the Kali you used might not support Retina? (At least, that's how I interpret your '(retina?)' note) . I would probably have checked if there were any enlightening error messages in the Debian boot log … did you do that?

You need to provide exact details. You failed to boot an unspecified version of Kali on an fairly unspecified Apple platform (we only know it lacks Thunderbolt), and we don't even know if the boot identified hardware or driver problems, or if it the computer just folded and died. Much the same thing with Win10PE. That's not a good starting point for recommendations or suggestions.

We don't even know that the system is in working order.

And you probably need to brush up your PC/Mac troubleshooting skills

Neither of that answers your question, but that's because I don't have anything solid to work on.

Added I don't see there's any real value in trying new things. It may work. You won't learn a thing except that 'random actions may work'. And you will not be able to say if the platform is sound or if there is an error that may affect your imaging or any later analysis. (Unless you were using non-working tools or equipment in the first place … and that would be a problem that needs its own solution.)

Figure out what the problem is, and solve it or work around it.

If this is a professional job, I hope you understand that you should document your failures? Especially if you don't make any attempts to identify the reason for them?

 
Posted : 24/09/2017 7:19 am
(@c-wawrentowicz)
Posts: 26
Eminent Member
Topic starter
 

I am not experienced in Apple products (less then 5% hardware that I examine).
Up to now I used target disk mode, thunderbolt and Encase to read image disk.
Now I have laptops and problem like https://www.youtube.com/watch?v=nm1racnUwVM
I tried KALI and CAINE after reading this http//az4n6.blogspot.com/2016/06/how-to-image-mac-with-live-linux.html

 
Posted : 24/09/2017 7:56 am
benfindlay
(@benfindlay)
Posts: 142
Estimable Member
 

I have got new Apple laptop without thunderbolt port

Is it one of the new(ish) 12" MacBooks?

They have a USB-C and a headphone jack - and no other ports. You can get USB-C to Thunderbolt adapters which might be worth a shot.

Cheers,

Ben

 
Posted : 24/09/2017 8:39 am
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
 

My advice Stay away from USB-C to Thunderbolt adapters. You will fail except you take an Apple original adapter!

 
Posted : 24/09/2017 11:14 am
Bunnysniper
(@bunnysniper)
Posts: 257
Reputable Member
 

I prepared WinPe 10 to boot Windows but in Windows I do not see disk.

Boot again from WinPE 10 and start X-Ways Forensic from it. Then you will have access to the drive.

best regards,
Robin

 
Posted : 24/09/2017 11:58 am
(@c-wawrentowicz)
Posts: 26
Eminent Member
Topic starter
 

I don't use X-Ways products except WinHex (I have got Encase) but price of X-Ways Imager is about 150Euro and I can take a risk and buy this product.

 
Posted : 24/09/2017 1:06 pm
pr3cur50r
(@pr3cur50r)
Posts: 28
Eminent Member
 

The Kali issue is likely just a resolution issue with the splash screen. Try booting to terminal or alternatively you can try resizing or deleting the splash screen.

 
Posted : 24/09/2017 11:37 pm
minime2k9
(@minime2k9)
Posts: 481
Honorable Member
 

Apple offer a USB C to USB/Diplay/USB C all in one.
Using this you can boot to a USB device as normal.
To be honest, for most Apple laptop imaging we tend to use macquisition.

 
Posted : 25/09/2017 7:15 am
Share: