Difference between pages "MacQuisition Boot CD" and "File:2-BB9780-ScrewRemoval.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
{{expand}}
 
  
{{Infobox_Software |
 
  name = MacQuisition Boot CD |
 
  maintainer = [[BlackBag Technologies, Inc.]] |
 
  os = {{Mac OS X}} |
 
  genre = {{Live CD}}, {{Disk imaging}} |
 
  license = ??? |
 
  website = [http://www.blackbagtech.com/products/macquisition.htm http://www.blackbagtech.com/products/macquisition.htm] |
 
}}
 
 
The '''MacQuisition Boot CD''' is a forensic [[Boot CD]]/[[Live CD]] built for imaging [[Mac OS X]] systems.
 
 
=Features=
 
 
==File Systems Understood==
 
 
* For Macs! Produces a [[dd]] image.
 
 
==File Search Facilities==
 
 
==Historical Reconstruction==
 
 
Can it build timelines and search by creation date?
 
 
==Searching Abilities==
 
 
Can it search? Does it build an index? Can it focus on file types or particular kinds of metadata?
 
 
==Hash Databases==
 
 
Can it create hashes of files and/or blocks? Can it compare these hash values to any databases?
 
What sort of hash functions does it use?
 
 
==Evidence Collection Features==
 
 
Can it sign files? Does it keep an audit log?
 
 
=History=
 
 
==License Notes==
 
 
Is it commercial or open source? Are there other licensing options?
 
 
= External Links =
 
 
==External Reviews==
 

Latest revision as of 02:31, 8 August 2013