Imaging Macbook Ret...
 
Notifications
Clear all

Imaging Macbook Retina with USB-C

4 Posts
4 Users
0 Reactions
880 Views
(@thepm)
Reputable Member
Joined: 17 years ago
Posts: 254
Topic starter  

Hey guys,

Today, I encountered a Macbook Retina 2015 with a single USB-C port and I need to image it. I have the password as well as a Macquisition license.

I know Scott Moulton posted a video on Youtube a couple of months ago. (https://www.youtube.com/watch?v=nm1racnUwVM), but I was wondering if others had some other techniques for imaging this this of machine ?

I already have to buy some hardware to do the job, since the power adapter was not seized with the computer. I just want to make sure that I'm buying the right hardware.

Thanks.


   
Quote
(@deltron)
Estimable Member
Joined: 11 years ago
Posts: 125
 

that seems to be the best way due to the ports.
Also the hub i believe has to be apple hub.


   
ReplyQuote
(@akin81)
New Member
Joined: 13 years ago
Posts: 3
 

I encountered a Macbook Retina 2015 last week. The machine installed bootcamp partition to run Windows. And I DON'T have the MacOS and Windows password to login.

Therefore, I went for the Target Disk Mode solution. I bought the Apple USB-C to USB adapter, and used a male to male USB 3.0 cable to connect the Macbook Retina 2015 to my forensics Macbook Air. It worked. Then I started using dd command to acquire the hard drive.

HOWEVER, the transfer speed is ridiculously SLOW! the speed is less than 700KB/s, and it would take 10 days to acquire the 500GB hard drive. Anyone have this slow speed issue?


   
ReplyQuote
pajkow
(@pajkow)
Estimable Member
Joined: 17 years ago
Posts: 81
 

Why do you need provide any passwords? Just get a USB Hub with power supply, hook up some external HDD to it, boot from McQuisition attached to it and image either core storage or the whole disk. Nice and easy.


   
ReplyQuote
Share: