Tricky forensic hard drive acquisition of an iMac

2015-04-30
Thumbnail
Recently I had to do a forensic acquisition of an iMac hard drive, and it presented many obstacles. The three basic ways to do an acquisition are: […] Remove the hard drive and use high speed dedicated imaging hardware such as a Logicube, or from a forensic workstation through a…
tech: mac, forensics, ftk