±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36464
New Yesterday: 0 Visitors: 350

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Taking forensic image of a live (open) MAC computer

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

sgware
Member
 

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Nov 02, 12 16:35

Have you done the basic research to understand how user account ID/passwords work on a MAC, or, a BSD variant? Once you have, I think the path will be apparent.

I could come straight out with the answer, but, knowing the answer without knowing how isn't of much value.  
 
  

ttcobadan
Member
 

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Nov 02, 12 17:39

Thanx sgware, I will search user account ID and password subject first. Also the file system, too.

I am googling.  
 
  

pmow
Member
 

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Nov 13, 12 00:08

Most Macs have a DMA-capable Firewire or Thunderbolt port. Although there are exceptions, I would think this resource would work for the cost of a cable and maybe the adapter:

www.breaknenter.org/pr...inception/  
 
  

ttcobadan
Member
 

Re: Taking forensic image of a live (open) MAC computer

Post Posted: Nov 13, 12 14:56

Woow this is great thing.

I like it. Thank you very much. That is the way I follow.  
 

Page 2 of 2
Page Previous  1, 2