iMac image acquisit...
 
Notifications
Clear all

iMac image acquisition

10 Posts
7 Users
0 Reactions
973 Views
(@ljhall)
Active Member
Joined: 16 years ago
Posts: 7
Topic starter  

Trying to image a iMac with Windows XP boot camp. I'm using a Raptor CD to create my E01 image but running into a problem. Here is the problem, when I power up the machine, pressing the option key, the machine gives me the option to to boot to the osx or the Windows partion, but not the CD. I have also tried using an external USB CD drive, and a different Raptor disc with the same results.

ljh


   
Quote
(@kovar)
Prominent Member
Joined: 18 years ago
Posts: 805
 

Greetings,

What version of the rEFIt bootloader is installed on the iMac? I found that Raptor and Helix wouldn't boot my MBP with v.11 of rEFIt on it. I upgraded to v.13 of rEFIt and they booted correctly. Unfortunately, installing a new version of rEFIt isn't forensically sound ….

-David


   
ReplyQuote
Beetle
(@beetle)
Reputable Member
Joined: 17 years ago
Posts: 318
 

Trying to image a iMac with Windows XP boot camp. I'm using a Raptor CD to create my E01 image but running into a problem. Here is the problem, when I power up the machine, pressing the option key, the machine gives me the option to to boot to the osx or the Windows partion, but not the CD. I have also tried using an external USB CD drive, and a different Raptor disc with the same results.

ljh

We start our Mac Pros / Macbooks /Imacs with Linux CDs all the time. You just have to wait some time for the CD to show up (it usually shows as a Windows CD). It isn't instant.

Try again but wait a bit.

Follow-up

Just tried Raptor on one of our Mac Pros, no problem. This may sound obvious, but did you test the Raptor CD you made on another system?


   
ReplyQuote
(@wfolson)
New Member
Joined: 20 years ago
Posts: 1
 

I have had great results using Helix 3 Pro on various Macs including the iMac…it's a little pricey, but it works. It is a possible solution if you can't get your current process to work….


   
ReplyQuote
ggrady
(@ggrady)
Active Member
Joined: 17 years ago
Posts: 6
 

And if truly desperate, the iMac (depending on model) isn't that bad to remove the hard drive from. My old G5 white plastic iMac required only 3 captive screws to get the back off and three screws holding the hard drive tray.

Beyond that, I've not had an issue with the Helix boot discs.


   
ReplyQuote
(@ljhall)
Active Member
Joined: 16 years ago
Posts: 7
Topic starter  

The machine does not have rEFIt installed. I have started the machine several times and waited for the CD to show up. So far it only displays the os partitions. I have tried three different Raptor CDs and a Helix CD. Just tried the Raptor and Helix Cd in my Macbook Pro with no issues. I might have to remove the hard drive. Thanks for the replies.

ljh


   
ReplyQuote
Beetle
(@beetle)
Reputable Member
Joined: 17 years ago
Posts: 318
 

The machine does not have rEFIt installed. I have started the machine several times and waited for the CD to show up. So far it only displays the os partitions. I have tried three different Raptor CDs and a Helix CD. Just tried the Raptor and Helix Cd in my Macbook Pro with no issues. I might have to remove the hard drive. Thanks for the replies.

ljh

Sounds like a a corrupt openfirmware.

I have heard that sometimes plugging in a USB drive will revive a CD drive that doesn't get recognized by the OF. YMMV…


   
ReplyQuote
(@mjantal)
Eminent Member
Joined: 16 years ago
Posts: 49
 

Have you tried putting the imac in target disk mode? You can google Imac target disk mode for help, connect the firewire 800 via write blocker to forensic machine to target drive.


   
ReplyQuote
alex101
(@alex101)
Estimable Member
Joined: 17 years ago
Posts: 105
 

Have you tried putting the imac in target disk mode? You can google Imac target disk mode for help, connect the firewire 800 via write blocker to forensic machine to target drive.

This is not a good idea if Windows has been installed via Bootcamp as you will make changes to the NTFS partition. I would only recommend using Target mode on older non Intel based Macs. Personally I always try to remove the hard drive to image it.


   
ReplyQuote
Beetle
(@beetle)
Reputable Member
Joined: 17 years ago
Posts: 318
 

Have you tried putting the imac in target disk mode? You can google Imac target disk mode for help, connect the firewire 800 via write blocker to forensic machine to target drive.

This is not a good idea if Windows has been installed via Bootcamp as you will make changes to the NTFS partition. I would only recommend using Target mode on older non Intel based Macs. Personally I always try to remove the hard drive to image it.

Yes Windows will try and write to the drive.

If you have access to a FW write blocker then this isn't an issue. When the first Tableau FW devices came out we tested them with Bootcamp machines and TDM with no problems.


   
ReplyQuote
Share: