±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 153

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Mac Acquisition Software

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

Justin.Fascetti
Newbie
 

Mac Acquisition Software

Post Posted: Oct 04, 19 18:19

Hello,
I'm wondering if anybody has a suggestion for a good Mac Imaging software? Something free and portable that can run off of an external hard drive, similar to FTK Imager for Mac. Are there any other good software's out there built for creating a forensic image of a Mac machine that meet this criteria?

Thanks!  
 
  

Igor_Michailov
Senior Member
 

Re: Mac Acquisition Software

Post Posted: Oct 04, 19 18:34

OSF Clone
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 
 
  

deeFIR
Member
 

Re: Mac Acquisition Software

Post Posted: Oct 05, 19 04:57

- Justin.Fascetti
Hello,
I'm wondering if anybody has a suggestion for a good Mac Imaging software? Something free and portable that can run off of an external hard drive, similar to FTK Imager for Mac. Are there any other good software's out there built for creating a forensic image of a Mac machine that meet this criteria?

Thanks!


If you're just looking for raw imaging at disk/block level, you could run any live OS from external media.

Do you need to be able to mount encrypted drives with user-provided password and unlock the volume, or are you going to use another product for that?  
 
  

UnallocatedClusters
Senior Member
 

Re: Mac Acquisition Software

Post Posted: Oct 06, 19 17:33

Sumuri Paladin

sumuri.com/software/paladin/  
 
  

randomaccess
Senior Member
 

Re: Mac Acquisition Software

Post Posted: Oct 06, 19 22:24

Macquisition or recon imager  
 
  

blackbag
Newbie
 

Re: Mac Acquisition Software

Post Posted: Oct 09, 19 14:29

If you're interested in learning about MacQuisition, our Mac acquisition software that has the ability to create physical images of Macs with the Apple T2 chip, you can learn more on our website (www.blackbagtech.com) or if you want to reach out to sales @ blackbagtech.com they can help you!  
 
  

EugeneBelk
Member
 

Re: Mac Acquisition Software

Post Posted: Oct 09, 19 15:47

The clone of a removed hard drive can be created via Belkasoft Evidence Center. BEC is also capable of decrypting APFS.  
 

Page 1 of 2
Page 1, 2  Next