±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 1
New Yesterday: 3
Overall: 24197
Visitors: 85

Taking forensic image of a live (open) MAC computer

EnCase, FTK, X-Ways Forensics etc. and open source/freeware discussion. Strictly no advertising of commercial products, please.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page Previous  1, 2 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 6:35 am

Have you done the basic research to understand how user account ID/passwords work on a MAC, or, a BSD variant? Once you have, I think the path will be apparent.

I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.  

sgware
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Fri Nov 02, 2012 7:39 am

Thanx sgware, I will search user account ID and password subject first. Also the file system, too.

I am googling.  

ttcobadan
Member
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Mon Nov 12, 2012 2:08 pm

Most Macs have a DMA-capable Firewire or Thunderbolt port. Although there are exceptions, I would think this resource would work for the cost of a cable and maybe the adapter:

www.breaknenter.org/pr...inception/  

pmow
Newbie
 
 
  

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Tue Nov 13, 2012 4:56 am

Woow this is great thing.

I like it. Thank you very much. That is the way I follow.  

ttcobadan
Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 2 of 2
Go to page Previous  1, 2