A PDF version of this document is available here.

MacQuisition Logo

MacQuisition

Quick Start Guide


PLEASE READ THIS QUICK START GUIDE COMPLETELY PRIOR TO IMAGING ANY DEVICE

  1. With the source computer off and plugged into a power source, insert the MacQuisition USB key into a USB port on the source computer.
  2. Attach a destination device to a Thunderbolt port if available, a second USB port, or a Firewire port. If the source machine has only one USB port, an examiner can use a powered USB hub to attach both the MacQuisition key and a destination device to the source machine.
  3. Press the source machine's power button, and immediately press and hold down the Option key. The 'EFI Boot' screen or 'Start-up Manager' screen appears.
  4. Continue the boot process by following the MacQuisition 2013 R2 or MacQuisition Legacy boot partition instructions depending on boot system specifications.
Note: Most Intel Apple hardware successfully boots to the MacQuisition 2013 R2 partition.


Booting to the MacQuisition 2013 R2 Partition

  1. Select the MacQuisition 2013 R2 Partition.
  2. Select the arrow below the partition icon to begin the boot process.
  3. The BlackBag logo appears with a spinning gear icon below it. Next, the Apple logo appears for approximately 5-10 seconds. Lastly, the MacQuisition EULA appears.
  4. If the AppleĀ® logo appears before the BlackBag logo, IMMEDIATELY shut the computer down by pressing and holding the power button; the source system is attempting to boot to a drive or other device and not to the trusted MacQuisition™ USB key.
  5. If a gray screen with a slashed circle appears, shut the system down by pressing and holding the power button, and boot the system to the MacQuisition Legacy partition as described below.

Booting to the MacQuisition Legacy Partition

  1. Select the MacQuisition Legacy Partition.
  2. Select the arrow below the partition icon to begin the boot process.
  3. The BlackBag logo appears with a spinning gear icon below it as the system boots, and the MacQuisition GUI interface appears.
  4. If the AppleĀ® logo appears, IMMEDIATELY shut the computer down by pressing and holding the power button; the source system is attempting to boot to a drive or other device and not to the trusted MacQuisition™ USB key.

For more information about using MacQuisition, please read our MacQuisition blog entries, visit BlackBag TV, or contact support.

For more information about MacQuisition, please visit the MacQuisition product page.