Forensic Acquisition Mac Computers

Kevin J. Ripa presents instructions for extracting Live Acquisition from a working Mac computer. Kevin tested it on Mountain Lion, Mavericks, Yosemite and El Captain. Testing was not on every OS Apple, but it should work on any Mac based on Intel.


First of all, you should read the FIRST instructions. Secondly, you must be careful in your processes and steps. Thirdly, everything needs to be recorded.

As a starting point, Kevin prepared a document that sets out the results of testing how long it takes to process images using various multimedia media and interfaces.

 

More.