Notifications
Clear all
Topic starter
14/11/2016 11:56 pm
We currently run EnCase Enterprise and use the EnCase Agent to allow us to image devices remotely over the network. As many of you probably know, this doesn't work too well on Mac OS's (agent installed and running, EnCase still throws errors) and Guidance has told us they know about it, but it's a low priority to fix. Does anyone know of a tool that would allow us to do remote collections on Macs in our environment similar to EnCase Enterprise? I'm not sure if a tool like Macquisition has the option to image remotely or whether everything must be locally connected to the forensic machine.