Cheers Greg,
You wouldnt happen to have any comparisons of expresscard vs onboard for firewire 800? Just want to see how much of an improvement on throughput if any when using the expresscard.
Cheers,
Ronan
I'd like to throw eSATA into the equation - has anyone tested the throughput of eSATA connections against Firewire 800 or other types of connections?
I'd like to throw eSATA into the equation - has anyone tested the throughput of eSATA connections against Firewire 800 or other types of connections?
Hi,
We have several high spec Intel Mac laptops in the lab and these really are very good at running windows (with Bootcamp) and EnCase. The Macs all vary a little in spec as they were bought at different times. We also use the BlackBag tools suite which means I Mac Book Pro can analyse pretty much everything.
Steve
I have been using a MacBook Pro (w/bootcamp) for since the summer for imaging and analysis. Normally image using a Tableau Write blocker on firewire 800 and output to an esata drive connected to an express34 card. I don't have any hard numbers, but i will say that it is the fastest laptop imaging solution I have encountered. It is also a great portable or secondary analysis solution.
Be careful about which esata external enclosure you use. They do not seem to be created equally and it would not be good to show up to image a system only to find your evidence drive performs slowly. Remember to validate before putting hardware into production.
Cheers Greg,
You wouldnt happen to have any comparisons of expresscard vs onboard for firewire 800? Just want to see how much of an improvement on throughput if any when using the expresscard.
Cheers,
Ronan
I'm sorry Ronan but I don't. I've heard others say that it may be a bit faster. The big news is that it's at least as fast. If I were interested in a forensic notebook, I'd look for one with esata and onboard fw800 (why buy the card if you don't need it) or at least the expresscard slot.
Greetings,
One problem we've been having with using a MacBook/VMware/XP combination is that VMware doesn't support Firewire so we're limited to USB which is painfully slow.
Has anyone tried MacBook/VMware/XP with an eSATA express/34 card?
-David
One problem I'm running into with my Mac Book Pro as an analysis system is that big chunks of the Perl CPAN archives will not build cleanly on OS X. The one I ran into tonight is Bundlelibwin32 which you need to run Harlan's perl tools for registry analysis.
I'm regularly finding myself hacking config files and makefiles to get open source tools to compile when they'll build with no intervention on a Linux system.
-David
Check the HP Pavilion HDX Notebook
One problem I'm running into with my Mac Book Pro as an analysis system is that big chunks of the Perl CPAN archives will not build cleanly on OS X. The one I ran into tonight is Bundlelibwin32 which you need to run Harlan's perl tools for registry analysis.
Which tools specifically, by name?
Also, have you tried ActivePerl from ActiveState?