Physical Acquisition and Analysis of
T2 Protected Macs
Your webinar is now available.
BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Apple’s latest Mac systems utilizing the T2 chip. Current logical imaging solutions, including functionality available in the previous version of BlackBag’s own Digital Collector tool, and competing solutions like Sumuri Recon and EnCase, miss critical file system information that only this new level of physical access will be able to provide. This vital imaging functionality is available in Digital Collector 2019 R1 and the output is seamlessly ingested for analysis by Inspector 2019 R1.
Join BlackBag’s Director of Research, Dr. Joe Sylve to learn more about these new images including:
- Why these new physical images are better than prior logical imaging techniques
- How to image a system with the T2 chip
- What changes they can expect when analyzing these new images
- Details on the new image format needed to support T2 chip and APFS Fusion devices