Remote Imaging Macs...
 
Notifications
Clear all

Remote Imaging Macs Running Catalina and T2 Chip

7 Posts
4 Users
0 Likes
1,940 Views
kastajamah
(@kastajamah)
Posts: 109
Estimable Member
Topic starter
 

Good Morning Everyone,

I am trying to find a solution for imaging Macs running Catalina and have a T2 chip over a network using an agent. We have reached out to our current vendor. They have advised they are currently creating a new agent for Mac OS X Catalina and working on T2 chip support, but no estimation on when this will be accomplished. They also told us older agents would not be able to connect with Macs running Catalina or have a T2 chip.

Do any of you have a solution for this? I work for a large company with offices all over the world so having subject employees ship their Macs to us is not practical especially if we are just grabbing specific files and do not require a complete image.

I look forward to your responses,

Kastajamah

 
Posted : 20/12/2019 1:41 pm
Simon Key
(@sdckey)
Posts: 9
Active Member
 

Hi,

I'm not sure which vendor you're referring to, but I demonstrated preview and logical acquisition of a T2 Mac running Catalina at Enfuse using a beta version of EnCase 8.11. It was also demonstrated on our Mac course in Reading last week.

We're keenly aware of the need for this solution and are striving to make it available ASAP.

Hope this helps.

Best.

Simon Key
Sr. Curriculum Developer
Learning Services - OpenText Security (EnCase)

 
Posted : 20/12/2019 3:48 pm
kastajamah
(@kastajamah)
Posts: 109
Estimable Member
Topic starter
 

Thank you for the quick response. My question was regarding imaging a Mac with a T2 chip over a network. I saw your demonstration at Enfuse and the response I received was after contacting tech support for the vendor that I believed you have successfully figured out. Kudos to your investigative abilities. Glad to hear a second witness your company is on it, but I am hoping for a more immediate solution due to equipment roll outs.

 
Posted : 20/12/2019 4:50 pm
Simon Key
(@sdckey)
Posts: 9
Active Member
 

Many thanks for your kind words - they're much appreciated. D

We've asked the folks in Product Management if they can provide an estimated release date.

 
Posted : 20/12/2019 5:03 pm
kastajamah
(@kastajamah)
Posts: 109
Estimable Member
Topic starter
 

Thanks Simon, that would be very helpful.

 
Posted : 20/12/2019 5:10 pm
(@hommy0)
Posts: 98
Trusted Member
 

Hi

Not sure if you found a solution however EnCase Forensic / Endpoint Investigator version 20.2 now contains the agent which allows for preview/collection of a Mac running macOS10.15 Catalina and with the T2 security chip, across the network.

Regards

 
Posted : 16/04/2020 9:57 am
Em-Belkasoft
(@em-belkasoft)
Posts: 33
Eminent Member
 

Good Morning Everyone,

I am trying to find a solution for imaging Macs running Catalina and have a T2 chip over a network using an agent. We have reached out to our current vendor. They have advised they are currently creating a new agent for Mac OS X Catalina and working on T2 chip support, but no estimation on when this will be accomplished. They also told us older agents would not be able to connect with Macs running Catalina or have a T2 chip.

Do any of you have a solution for this? I work for a large company with offices all over the world so having subject employees ship their Macs to us is not practical especially if we are just grabbing specific files and do not require a complete image.

I look forward to your responses,

Kastajamah

Hi. Did your vendor later provide what you needed?

Belkasoft has an agent that allows you to acquire or extract data from almost all Macs remotely (even those with T2 chips). The remote forensics functions in Belkasoft Evidence Center are quite extensive, so our customers are covered.

Perhaps, you may want to look into Belkasoft's remote forensics solutions.

 
Posted : 15/05/2020 4:05 pm
Share: