Has anybody tried using these softwares via apples windows emulator BootCamp?
if so, how does it compare?
I've used EnCase on bootcamp and in VMware Fusion. Works flawlessly (well, as much as on a PC anyway). FTK might require a Mac Pro or something like that but should work fine.
I've used both EnCase and FTK 2 on my MacPro without any problems whatsoever using BootCamp. It runs just as well on the Mac as it does my Digital Intelligence FRED.
Chris
Bootcamp is not a Windows emulator. It just provides a method of non-destructive partitioning of a Mac volume, using a Mac in a multiboot environment for Windows (only officially supported multiboot) and provides Apple written drivers for Windows that hook into the Apple hardware more effectively.
I have used both Bootcamp partitioned Macs and Fusion to run FTK, enCase and so on, and found either method to be no different to the mentioned software than running the software on a 'pure' Windows box.
thanks for the input guys. I want to start playing around with ftk/encase, and have only just purchased my imac quadcore I7 with 16 ram. Can i use this machine to play around with the software? Can you use a write blocker via firewire/USB2?
thanks for the input guys. I want to start playing around with ftk/encase, and have only just purchased my imac quadcore I7 with 16 ram. Can i use this machine to play around with the software? Can you use a write blocker via firewire/USB2?
Yes to both questions. Firewire write blockers are a bit rare. I have used the one from Tableau and found it to be very good, as are most of their units.
thanks for the input guys. I want to start playing around with ftk/encase, and have only just purchased my imac quadcore I7 with 16 ram. Can i use this machine to play around with the software? Can you use a write blocker via firewire/USB2?
Yes to both questions. Firewire write blockers are a bit rare. I have used the one from Tableau and found it to be very good, as are most of their units.
Almost all, if not all of Tableau's write blockers/bridges offer a 1934a/b connection on them. I've actually had better luck using the firewire ports on my Tableau WB-ers on my MacBook Pro running XP through bootcamp than i have running firewire in native windows.
Also i've not had any problems thus far running any forensic program on my mac (while booted into windows)
I am not sure if he meant a FireWire interface to the host or a FireWire blocker for target disk mode.