Dear all,
I needd to do the copy of a mac book pro model 1502 emc 2835. Usually I boot the mac using the usb with caine 7 inserted. But this time freeze.
what can I do?
Thanks
Potential free option - Parrot Security https://
Sumuri Recon Imager at $399.00 https://
I have used Recon Imager successfully.
I have not tested Parrot Security on your specific MacBook model, but it is worth a try.
Why not just remove the SSD and clone it to a hard drive? It's a PCIe one, so you can't use a SATA adapter, but there are plenty of adapters that will go onto the PCIe slot on a typical motherboard.
I'd probably just put it in the PCIe slot with an adapter on one of my own Linux computers. I guess that's not really any simpler than just booting the laptop to Parrot, but I know my desktop boots up and functions fine since I use it all the time. Instead of wasting time trying to figure out why you can't the the laptop to boot.
Hi,
I suppose that it has not "filevault" active.
Have you test Caine 9?
You can test Deft Zero. I have tested on other MacBook model (older) with SSD and I made the image forensics.
Regards.
Ive had a similar issue with Paladin freezing, used DEFT zero instead.
+1 for either making your own OSX Boot disk (which is probably not difficult as long as you can make sure it doesn't automatically mount your disk), or just purchasing a prebuilt one like Recon Imager or Macquisition
You're going to need it eventually; both APFS and FileVault2 require a Mac in at least part of the examination.
