The MacQuisition Boot Disk is a forensic acquisition tool used to safely and easily image Mac source drives using the source system. MacQuisition provides an intuitive user interface to the traditional command line, providing both beginner and advanced forensic examiners with a valuable tool to: Easily identify the source device(s) Configure destination location Image directly over the network Use the command line (recommend for advanced users only) Log case, exhibit and evidence tracking numbers and notes Automatically generate MD5, SHA1 and SHA 256 hashes Advanced features include hash and block size customization along with extension naming options
Comments