Join Us!

Notifications
Clear all

Mac OS pick one  

  RSS
armresl
(@armresl)
Community Legend

Since my Linux distro thread went nowhere, I wanted to try this.

You can pick one piece of software to acquire (I say that because of the keyboard and trackpad limitations) and analyze Mac OS products (besides Iphones)

Katana
Sumuri
Blackbag
Other.

Which and why.

Thanks to all.

Quote
Posted : 20/08/2018 1:16 am
randomaccess
(@randomaccess)
Active Member

You cant really group acquire and analyse for this question.

For example you can acquire Mac's using recon imager or macquisition
But to analyse them you need recon lab or blacklight.

It also depends on how you come across devices.

Macquisition has live acquisition, data capture, and memory acquisition on live devices. But costs more.
Recon imager doesn't. But you may not come across those devices so it's worth the discount

I haven't played with katana stuff. Or recon lab.

There's just a few different things to consider.

I think if money wasn't an issue I'd go the blackbag kit because it has more functionality.
But then if I didn't need the live stuff, recon imager and blacklight would do you well. Then again recon lab may work just as well, don't know, haven't played with it.

Edit meant to say can't group acquire and analyse together.

ReplyQuote
Posted : 20/08/2018 9:37 am
armresl
(@armresl)
Community Legend

Thanks random.

All the devices would be turned off and password provided.

You can really group acquire and analyse for this question.

For example you can acquire Mac's using recon imager or macquisition
But to analyse them you need recon lab or blacklight.

It also depends on how you come across devices.

Macquisition has live acquisition, data capture, and memory acquisition on live devices. But costs more.
Recon imager doesn't. But you may not come across those devices so it's worth the discount

I haven't played with katana stuff. Or recon lab.

There's just a few different things to consider.

I think if money wasn't an issue I'd go the blackbag kit because it has more functionality.
But then if I didn't need the live stuff, recon imager and blacklight would do you well. Then again recon lab may work just as well, don't know, haven't played with it.

ReplyQuote
Posted : 20/08/2018 8:18 pm
UnallocatedClusters
(@unallocatedclusters)
Senior Member

I own two licenses of Recon Imager - works very well.

I also recently purchased a license of BlackLight - works very well.

ReplyQuote
Posted : 20/08/2018 11:07 pm
Wardy
(@wardy)
Active Member

I would say Blacklight every day. Some people may think I am biased as I worked on the early versions of it.

However, my opinion is based on the fact it follows the Apple ethos - it just works. It works well, is intuitive and gives me the results I need every time.

ReplyQuote
Posted : 21/08/2018 9:46 am
Share: