Mac Forensics

BlackBag’s Partnership With Berla Expands Your Analysis Environment In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such,...

Best practices require that when creating a forensic image of a computer, or other digital media used with a computer, a write-blocking device should be...

By: Stephanie Thompson, Solutions Engineer While the amounts of data in typical digital forensic cases today is a lot different than it was several years ago, the...

Apple computers have always included a handy feature known as Target Disk Mode (TDM), provided to allow the easy transfer of files from one computer...

BlackBag Technologies is proud to announce the release of the first and only solution to produce a decrypted physical image of the latest Mac systems...

BlackBag is excited for customers to experience the powerful new features added to BlackLight 2019 R1. Are you ready to dive into the improvements in the...

We're extremely proud to announce that our Mac forensic tool, MacQuisition, will be the first and only solution to produce a decrypted physical image of Apple’s latest Mac...

Within the DFIR community, support for fundamental structures, like file systems, across tools is essential for examiners to complete their work. BlackBag has provided industry-leading...

With the release of Apple’s T2 chip, forensic examiners are forced to conduct logical acquisitions. This is where MacQuisition steps in and saves the day! One...

Continuing with BlackBag's leading APFS support, BlackLight 2018 R3 is now the only forensic solution to allow examiners to parse APFS Snapshots.  As part of...