Notifications
Clear all

Mac OS pick one

5 Posts
4 Users
0 Likes
1,151 Views
(@armresl)
Posts: 1011
Noble Member
Topic starter
 

Since my Linux distro thread went nowhere, I wanted to try this.

You can pick one piece of software to acquire (I say that because of the keyboard and trackpad limitations) and analyze Mac OS products (besides Iphones)

Katana
Sumuri
Blackbag
Other.

Which and why.

Thanks to all.

 
Posted : 20/08/2018 12:16 am
(@randomaccess)
Posts: 385
Reputable Member
 

You cant really group acquire and analyse for this question.

For example you can acquire Mac's using recon imager or macquisition
But to analyse them you need recon lab or blacklight.

It also depends on how you come across devices.

Macquisition has live acquisition, data capture, and memory acquisition on live devices. But costs more.
Recon imager doesn't. But you may not come across those devices so it's worth the discount

I haven't played with katana stuff. Or recon lab.

There's just a few different things to consider.

I think if money wasn't an issue I'd go the blackbag kit because it has more functionality.
But then if I didn't need the live stuff, recon imager and blacklight would do you well. Then again recon lab may work just as well, don't know, haven't played with it.

Edit meant to say can't group acquire and analyse together.

 
Posted : 20/08/2018 8:37 am
(@armresl)
Posts: 1011
Noble Member
Topic starter
 

Thanks random.

All the devices would be turned off and password provided.

You can really group acquire and analyse for this question.

For example you can acquire Mac's using recon imager or macquisition
But to analyse them you need recon lab or blacklight.

It also depends on how you come across devices.

Macquisition has live acquisition, data capture, and memory acquisition on live devices. But costs more.
Recon imager doesn't. But you may not come across those devices so it's worth the discount

I haven't played with katana stuff. Or recon lab.

There's just a few different things to consider.

I think if money wasn't an issue I'd go the blackbag kit because it has more functionality.
But then if I didn't need the live stuff, recon imager and blacklight would do you well. Then again recon lab may work just as well, don't know, haven't played with it.

 
Posted : 20/08/2018 7:18 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

I own two licenses of Recon Imager - works very well.

I also recently purchased a license of BlackLight - works very well.

 
Posted : 20/08/2018 10:07 pm
Wardy
(@wardy)
Posts: 149
Estimable Member
 

I would say Blacklight every day. Some people may think I am biased as I worked on the early versions of it.

However, my opinion is based on the fact it follows the Apple ethos - it just works. It works well, is intuitive and gives me the results I need every time.

 
Posted : 21/08/2018 8:46 am
Share: