MacQuisition

So, you’ve downloaded MacQuisition Live, let’s take a look at some ways you can use it. MacQuisition Live provides a mechanism to collect data from remote...

As more employees are required to work from home, we’ve heard from our customers that they need the ability to remotely collect data from Mac...

Today’s investigations often involve multiple machines and devices.  It can be time consuming to image and process several computers, external hard drives, and other media...

As Windows has evolved over time several artifacts have appeared that can highlight when programs or applications were executed, and which user executed them.  The...

By: Bruce Hunter, Senior Forensic Engineer With the release of macOS 10.12 Sierra, Apple introduced a new form of logging referred to as Unified Logs.  These...

What is Missing from Logical Acquisitions? By: Tim Thorne, Solutions Engineer Over the past couple of weeks, I have attended several international events and customer meetings where...

By: Justin Matsuhara, Team Lead, Solutions Engineer & Stephanie Thompson, Solutions Engineer Depending on the digital forensic imaging tool you have available, creating a forensic image...

Best practices require that when creating a forensic image of a computer, or other digital media used with a computer, a write-blocking device should be...

Apple computers have always included a handy feature known as Target Disk Mode (TDM), provided to allow the easy transfer of files from one computer...

BlackBag Technologies is proud to announce the release of the first and only solution to produce a decrypted physical image of the latest Mac systems...