I am not sure what the opinion is correct for acquisition of a Mac with T2 chip.
It should let you acquire files still. And you could write a hunt to collect all of the files that you want.
But I'd love to see someone testing it out and demonstrating why it is or isn't suitable.
Hi, rahul25
Have you chosen a tool already? Belkasoft supports remote acquisition of data from Macs (with T2 chips or not).
You can read more on remote forensics options in Belkasoft Evidence Center here https://
if you own a copy of MacQuisition and current on maintenance they are giving MacQ Live at no additional cost. It will only allow to do a targeted collection to an L01 or Sparse image. It's not ideal but if you need just for eDiscovery it's good enough.
I am not aware of a remote solution for full disk imaging of Mac with T2 as most of the tools I experience require booting to a dongle outside of OSX.