±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 32784
New Yesterday: 0 Visitors: 130

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Taking forensic image of a live (open) MAC computer

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 11:35 am

Have you done the basic research to understand how user account ID/passwords work on a MAC, or, a BSD variant? Once you have, I think the path will be apparent.

I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.  

sgware
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 12:39 pm

Thanx sgware, I will search user account ID and password subject first. Also the file system, too.

I am googling.  

ttcobadan
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Mon Nov 12, 2012 7:08 pm

Most Macs have a DMA-capable Firewire or Thunderbolt port. Although there are exceptions, I would think this resource would work for the cost of a cable and maybe the adapter:

www.breaknenter.org/pr...inception/  

pmow
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Tue Nov 13, 2012 9:56 am

Woow this is great thing.

I like it. Thank you very much. That is the way I follow.  

ttcobadan
Member
 
 

Page 2 of 2
Go to page Previous  1, 2