±Your Account
Membership:
New Today: 1
New Yesterday: 3
Overall: 24197
Visitors: 85±Latest Webinar
±Latest Articles
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Go to page Previous 1, 2
Taking forensic image of a live (open) MAC computer
Re: Taking forensic image of a live (open) MAC computer
Posted: Fri Nov 02, 2012 6:35 am
Have you done the basic research to understand how user account ID/passwords work on a MAC, or, a BSD variant? Once you have, I think the path will be apparent.
I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.
I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.
-

sgware - Member
Re: Taking forensic image of a live (open) MAC computer
Posted: Fri Nov 02, 2012 7:39 am
Thanx sgware, I will search user account ID and password subject first. Also the file system, too.
I am googling.
I am googling.
-

ttcobadan - Member
Re: Taking forensic image of a live (open) MAC computer
Posted: Mon Nov 12, 2012 2:08 pm
Most Macs have a DMA-capable Firewire or Thunderbolt port. Although there are exceptions, I would think this resource would work for the cost of a cable and maybe the adapter:
www.breaknenter.org/pr...inception/
www.breaknenter.org/pr...inception/
-

pmow - Newbie
Re: Taking forensic image of a live (open) MAC computer
Posted: Tue Nov 13, 2012 4:56 am
Woow this is great thing.
I like it. Thank you very much. That is the way I follow.
I like it. Thank you very much. That is the way I follow.
-

ttcobadan - Member
















