Mac Forensic/Edisco...
 
Notifications
Clear all

Mac Forensic/Ediscovery Analysis Tools (post-preservation)

1 Posts
1 Users
0 Likes
236 Views
(@du212)
Posts: 7
Active Member
Topic starter
 

Im kinda curious to know how others are using their tools when they encounter Macs in the field. Im NOT talking about which tools are used to preserve or review the Mac image in the lab or field…

For example, once I've preserved a forensic image of a Mac and looked through it using my forensic viewer(s) of choice, now litigation support may want a copy of all email. These law firm typically only "accept" windows based email sources which they load into concordance or hosted platforms for review, so conversion, with its usual caveats applied, is necessary.

I've used Aid4Mail Forensic edition to do conversions from Thunderbird or MBOX to PST and have heard of Emailchemy for Entourage to IMAP (and IMAP to PST).

Anyone using anything for MAC AOL PFC conversions to deliverable windows formats? Any other interesting Mac - Ediscovery tools out there people are willing to share or comment?

 
Posted : 08/06/2007 7:19 pm
Share: