Posted: Fri Feb 27, 2015 11:59 am Post subject: Questions regarding Mac OS Write Blockers & Digital Auto
I investigate Internet Crimes Against Children and have recently begun teaching myself and taking classes on Digital Forensics to help speed up processing ( triage) devices I have seized in my investigations.
I have a MacBook Pro which currently has Lantern on it but I have begun looking at expanding what programs I can run from that platform. I know pretty much the bare minimum to use Mac OS so please bare with me.
I recently attended training on Digital Autopsy and I love it. It was described to me as the Poor Man's Encase and that's very accurate. I would love to install it to my Mac and run it either via Bootcamp or VM but I have one question I need answered before I go through the steps of tracking down a Windows OS disk to install from.
Does Mac OS work well with just any old Write Blocker? Or do I have to get a specific type? I know there is digital write blockers but our tech people frown on that and the guys teaching the Digital Autopsy class indicated I should get a hardware write blocker.
The Tableau line of forensic bridges come with eSATA, FireWire 800, FireWire 400, and USB connectors to attach to the host computer and depending on the model with various interfaces to connect to subject media depending on the model.
For example the eSATA Forensic Bridge Tableau Model T35es-R2/T35es-R2-RW has the following Host Side connectors:
One eSATA Signal Connector
Two 9-pin FireWire800 (1394B)
One 6-pin FireWire400 (1394A)
One USB Mini-B (5 pin, USB2.0 high/full/low speed)
WiebeTech (cru-inc) provides similar in their line of forensic bridges. For example their Forensic ComboDock v5 has the following Host (I/O) Ports
FireWire 400: up to 400 Mbps
(1) pair of FireWire 800: up to 800 Mbps
(1) USB 3.0: up to 5 Gbps
(1) eSATA: up to 3 Gbps
I have used various units from both companies with Mac computers running both MacOS and Windows.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum