Imaging Macbook Ret...
 
Notifications
Clear all

Imaging Macbook Retina with USB-C

4 Posts
4 Users
0 Likes
681 Views
(@thepm)
Posts: 253
Reputable Member
Topic starter
 

Hey guys,

Today, I encountered a Macbook Retina 2015 with a single USB-C port and I need to image it. I have the password as well as a Macquisition license.

I know Scott Moulton posted a video on Youtube a couple of months ago. (https://www.youtube.com/watch?v=nm1racnUwVM), but I was wondering if others had some other techniques for imaging this this of machine ?

I already have to buy some hardware to do the job, since the power adapter was not seized with the computer. I just want to make sure that I'm buying the right hardware.

Thanks.

 
Posted : 13/04/2016 7:06 pm
(@deltron)
Posts: 125
Estimable Member
 

that seems to be the best way due to the ports.
Also the hub i believe has to be apple hub.

 
Posted : 13/04/2016 7:51 pm
(@akin81)
Posts: 3
New Member
 

I encountered a Macbook Retina 2015 last week. The machine installed bootcamp partition to run Windows. And I DON'T have the MacOS and Windows password to login.

Therefore, I went for the Target Disk Mode solution. I bought the Apple USB-C to USB adapter, and used a male to male USB 3.0 cable to connect the Macbook Retina 2015 to my forensics Macbook Air. It worked. Then I started using dd command to acquire the hard drive.

HOWEVER, the transfer speed is ridiculously SLOW! the speed is less than 700KB/s, and it would take 10 days to acquire the 500GB hard drive. Anyone have this slow speed issue?

 
Posted : 19/04/2016 6:57 am
pajkow
(@pajkow)
Posts: 81
Estimable Member
 

Why do you need provide any passwords? Just get a USB Hub with power supply, hook up some external HDD to it, boot from McQuisition attached to it and image either core storage or the whole disk. Nice and easy.

 
Posted : 26/04/2016 3:27 am
Share: