I was wondering if anybody has any new or recent methods for forensically collecting data from a Mac? I was hoping to find a portable tool (something that can be loaded onto an external HDD or Flash drive) that will allow me to perform a logical collection of data in a forensically sound manner. Something that would allow me to grab targeted folders/files from a Users Profile and collect in a forensically sound manner. Any ideas?Â
Thanks.Â
Cellebrite Collector (formerly Blackbag) is pretty good
My recommendation is Sumuri Recon ITR or Sumuri Carbon.
You could boot it into Target mode by holding the T key whilst booting, then connect to your forensic workstation using a Thunderbolt cable.


