FTK Imager and Mac

Yes, and its very easy to use. Just run it with –help to get the list of commands and pick what you need.

thank you

i recently wrote a blog entry about using the cmd line tool to acq os x machines. you can read it at http//www.davnads.blogspot.com it may also be worth noting that there is also a beta GUI interface to this cmd line utility available. I think it can be downloaded on http//www.appleexaminer.com/

davnads, thank you very much. This is what I was looking for since I am new to Mac forensics

davnads, thank you very much. This is what I was looking for since I am new to Mac forensics

Macs are very interesting to investigate. Also check out Inside The Core Podcast - I have found that they offer some very useful advice http//insidethecore.com/

There was just a post on the SANS blog about acquiring Macs as well
http//computer-forensics.sans.org/blog/2011/02/02/forensically-sound-mac-acquisition-target-mode