Webinar: How To Image Macs With The T2 Chip

BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Appleā€™s latest Mac systems utilizing the T2 chip.

Current logical imaging solutions, including functionality available in the previous version of BlackBagā€™s own MacQuisition tool, and competing solutions like Sumuri Recon and EnCase, miss critical file system information that only this new level of physical access will be able to provide.

This vital imaging functionality will be available in the upcoming MacQuisition 2019 R1 release and the output will be seamlessly ingested for analysis by BlackLight 2019 R1.Join BlackBagā€™s Director of Research, Dr. Joe Sylve to learn more about these new images during our webinar "Physical Decrypted Images from Macs with the T2 Chip". During this webinar, Dr. Sylve will review the following:

1. Why these new physical images are better than prior logical imaging techniques
2. How to image a system with the T2 chip
3. What changes they can expect when analyzing these new images
4. Details on the new image format needed to support T2 chip and APFS Fusion devices


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


Can’t make it live? This webinar will be recorded and available upon completion. If you can’t make the live webinar, please register and an on demand version will be sent to you.

Register now!

Leave a Comment