This document serves as a quick start guide for BlackBag's MacQuisition 2020 R1, a powerful tool designed for digital forensic professionals. It provides essential information for triaging and imaging Mac computers, ensuring a forensically sound data acquisition process.
MacQuisition supports a range of macOS versions and offers capabilities for live data collection, booting target systems directly, and utilizing Target Disk Mode (TDM). The guide covers crucial considerations for forensic investigations, including handling firmware passwords, T2 security chips, and FileVault2 encryption.
Key Features and Capabilities:
- Triaging and imaging Mac computers for forensic analysis.
- Collecting data from live running Mac systems.
- Booting target systems into a forensically sound environment.
- Support for various macOS versions and hardware configurations.
- Guidance on managing security features like T2 chips and FileVault2.
- Utilizing Target Disk Mode for data acquisition.
For detailed operational procedures and advanced features, users are encouraged to consult the full MacQuisition User Guide. BlackBag Technologies provides this guide to assist examiners in their digital forensic workflows.
For more information about BlackBag Technologies and their forensic solutions, visit www.blackbagtech.com.
