Solving The Mystery Behind Imaging A Mac Computer

Join BlackBag experts for an upcoming webinar on imaging a Mac computer installed with APFS and/or a T2 secured Mac computer.As every year passes, Apple computers become more and more complex. Before any analysis of data can occur, the digital forensic examiner must first forensically acquire the device.

But to do so, an examiner must consider:
– What file system do they expect to encounter?
– Is the system installed with a fusion drive?
– Is FileVault2 enabled on the system?
– Is a T2 security chip installed on the system?

Join BlackBag’s Solution Engineers, Tim Thorne and Stephanie Thompson as they use MacQuisition to walk you through acquiring the various types of Mac computers installed with APFS and/or a T2 secured Mac computer, taking the mystery away of imaging.

Join us December 19th at 11am EST

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

Can’t make it live? Register and an on-demand version will be sent to you upon completion.

About BlackBag Presenters:

Stephanie Thompson, Solutions Engineer

Stephanie has a been a digital forensics analyst working in the Federal Government space for 15 years prior to coming to BlackBag. Her background is primarily in Counter-Terrorism and Counter-Intelligence investigations, but also worked closely with federal law enforcement agencies on a routine basis. She holds a Bachelor of Science in Management Information Systems from George Mason University, and Masters of Forensic Science degree from George Washington University. She loves to tackle interesting problems in the community, and hopes to go back for her PhD in the next couple of years.

Tim Thorne, Solutions Engineer

Tim has been a Solutions Engineer with BlackBag since April 2016. Before his time with BlackBag, he completed 30 years of service with the Metropolitan Police in London where, prior to roles in Digital Forensics, he worked from New Scotland Yard engaged in drugs, murder and robbery investigations across London. He specialized in long term covert internal corruption investigations and later became the Anti-Corruption Command lab manager for network and digital forensic investigations targeting corrupt police officers and those seeking to corrupt them. He went on to become a Digital Forensic Operations Manager for the New Scotland Yard Counter Terrorism unit where he managed a large team responsible for exploiting digital media associated with those engaged in acts of terrorism both in outside of the UK. Tim enjoys travelling with his family, walking his dog and recently moved to France to enjoy, amongst other things, the weather and amazing road cycling.

About BlackBag Technologies:

BlackBag® Technologies offers innovative forensic acquisition and analysis tools for both Windows and Mac OS X based computers, as well as iOS and Android mobile devices. Its forensic software is used by hundreds of federal, state, and local law enforcement agencies around the world, as well as by leading corporations and consultants, to investigate all types of digital evidence associated with both criminal, civil and internal investigations. BlackBag® Technologies also develops and delivers expert forensics training and certification programs, designed for both novice and experienced forensics professionals. To learn more, visit or email

Leave a Comment

Latest Videos

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles