Image of MacBook Pr...
 
Notifications
Clear all

Image of MacBook Pro

4 Posts
3 Users
0 Likes
1,160 Views
(@roncufley)
Posts: 157
Estimable Member
Topic starter
 

Guys, I need some help, please.

I am attempting to obtain a forensic image of a MacBook Pro using X-Ways imager. I have connected the Mac to my PC using FireWire. Everything connects up ok and I boot the Mac to Target Disk Mode. X-Ways can see the Mac disk as a physical disk so everything should work, however as soon as I plug the power supply into the Mac I can no longer read the disk and it disappears from the Device Manager on the PC.

It all works fine on the battery but, of course, it does not last long enough for a full image.

Do you guys have any ideas?

Regards
Ron Cufley

 
Posted : 17/11/2019 10:17 am
(@dandaman_24)
Posts: 172
Estimable Member
 

If you can't power and image at the same time. Charge the battery so full, boot to a reputable Mac imaging software and acquire the Macintosh HD partition only. You may have a 1tb SSD, only 100gb may be in use, so imaging this will be quicker and your battery shouldn't run out….hopefully.

 
Posted : 17/11/2019 11:28 am
(@jahearne)
Posts: 35
Eminent Member
 

Make sure you are using quality cables. I have had issues with USB hubs when attempting to image a MacBook. Not all hubs are equal.

 
Posted : 20/11/2019 7:05 pm
(@roncufley)
Posts: 157
Estimable Member
Topic starter
 

Thanks Guys, I now have the image. I used a different PC, different software and a different cable and it worked at last.

 
Posted : 20/11/2019 8:58 pm
Share: