±Partners and Sponsors

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 1
New Yesterday: 12
Overall: 26990
Visitors: 68

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Taking forensic image of a live (open) MAC computer

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 6:35 am

Have you done the basic research to understand how user account ID/passwords work on a MAC, or, a BSD variant? Once you have, I think the path will be apparent.

I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.  

sgware
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 7:39 am

Thanx sgware, I will search user account ID and password subject first. Also the file system, too.

I am googling.  

ttcobadan
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Mon Nov 12, 2012 2:08 pm

Most Macs have a DMA-capable Firewire or Thunderbolt port. Although there are exceptions, I would think this resource would work for the cost of a cable and maybe the adapter:

www.breaknenter.org/pr...inception/  

pmow
Newbie
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Tue Nov 13, 2012 4:56 am

Woow this is great thing.

I like it. Thank you very much. That is the way I follow.  

ttcobadan
Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 2 of 2
Go to page Previous  1, 2