19.2. MacForensicsLab
AccessData's Forensics Toolkit (FTK) and Guidance Software's EnCase are two of the predominantly used packages for digital forensics in law enforcement today. However, they are not natively installable on the Mac platform; therefore, we will concentrate on SubRosaSoft's MacForensicsLab, which is native to the Mac platform and has many of the same features as other non-Mac native apps. It is the best Mac-native solution for forensics on the market today.
NOTE
MacForensicsLab can run on Windows and Linux as well. However, it is only available to private forensics investigators and law enforcement officers who can provide bona fide credentials.
MacForensicsLab automates many aspects of the acquisition (performing forensically ...
Get Enterprise Mac Security: Mac OS X Snow Leopard now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
