Forensic Focus - General Discussion - MacQuisition

Forensic Focus

General Discussion

MacQuisition

MacQuisition

Posted: Mon Feb 14, 2011 2:56 am
Author: Jonathan Location: London, UK
Would like to know people's views on BlackBag's MacQuisition. What's the methodology behind it - the BlackBag website is rather spare in its details, there aren't even any photos. I see that it currently can't deal with Mac Book Pros with i5 and i7 processors.

Thanks.

Re: MacQuisition

Posted: Mon Feb 14, 2011 9:55 am
Author: Redcelica67 Location: Derbyshire, England
I haven't seen anything on this either Jonathan..... I too am interested in any details on offer.......

Cheers
David

Re: MacQuisition

Posted: Mon Feb 14, 2011 8:59 pm
Author: kovar Location: Central Illinois
Greetings,

I used it on a few occasions last year. I never felt completely comfortable with it, unfortunately. One concrete complaint I had was that it wouldn't verify the acquisition, I had to do that as a distinct step using another tool. (At least that's how I remember it going.)

I really wish there was one definitive OS X acquisition tool but it seems that you've got to carry around three or four tools and try them all to be sure that you'll get the job done.

-David

Re: MacQuisition

Posted: Tue Feb 15, 2011 5:12 am
Author: binarybod Location: Nottingham UK
- kovar
I really wish there was one definitive OS X acquisition tool


I use caine, it hasn't failed me yet (though in truth, my sample size isn't that large).

Paul

All times are GMT - 6 Hours
Page 1 of 1
http://www.forensicfocus.com/