Upon boot, CAINE 'blocks all the block devices (e.g. This distro was made specifically for computer forensics. CAINE stands for Computer Aided Investigated Environment.
Once booted into Linux, an imaging tool with a GUI, like Guymager, can be used to create an image in E01 or dd format.įor this post, I have selected the CAINE distro. If the Mac is already powered off, booting the Mac with a live Linux distro may be a good option. Many times cracking open something like a MacBook Air to grab a hard drive requires special tools and adapters which may not be readily available. The first option I am going to go walk through is imaging a Mac with a Live Linux bootable USB. Depending on the situation, some may work, some may not, but I just wanted to throw some options out in the Google soup mix. I am planning on doing several blog posts about different ways to image a Mac. No firewire ports for target disk mode, no easy way to remove the hard drive, or if the the hard drive is removed, you don't have the specific adapter needed to connect your write blocker to the drive.
When encountering Macs, its seems like there is always a challenge. Now you can test out a Linux program without as much.One thing I've learned when it's comes to imaging Macs is it's good to have options. Well, here is a guide on how to boot a Live Linux onto a USB with a Mac computer.
0 kommentar(er)
