• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 958
  • Last Modified:

Forensic Image of a 24" iMac

I have a 24" iMac and a LogicCube Dossier.  I need to make a forensic image of the iMac.  I have looked up the directions on removing the hard drive from the iMac and that does not seem feasible.

The configuration I have tried so far is iMac to PC via Firewire and then PC to LogicCube via USB.  The software estimates that the image will take close to 15 years to complete.
  • 2
1 Solution
Would Carbon Copy Cloner do what you want?  http://www.bombich.com/ccc_features.html
LouSch7Author Commented:
Carbon Copy Cloner does appear to be a decent program however, I doubt they would be willing to testify in court if/when called upon to provide legal documentation of their software's processes and backup the legitimacy of the image.
CCC would not give you a forensic image, as there would not be the hashing of the drive image to prove that it had not been tampered with.

There is a good page on mac forensics at http://www.peachpit.com/articles/article.aspx?p=707908&seqNum=2

However, using the setup you specify, with the Mac in Target Disk Mode (hold down T when switching on the Mac), it will be available to the forensic cloning PC as an external firewire HD, operating at either 400Mbps or 800Mbps dependent upon the firewire interfaces available.

The USB connection to the LogicCube Dossier should operate at the same speed as any other PC being cloned would operate. Just double check that you are indeed connecting over the USB connection as a USB 2.0 connection (ie 480Mbps) rather than USB 1.0 (12Mbps). This will have a major effect upon your speeds. Not all USB ports are created equal, so you might find that the PC has a mixture of USB 1.0 and USB 2.0 ports.


LouSch7Author Commented:
Thank you all for your responses, in the end the best solution was to go through the lengthy 15 step process of removing the screen and taking out the hard drive.  More and more reasons everyday to stick with PC.

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now