Investigators can pre-configure MacLockPick II to make copies of specified files and folders on a suspect's system. Copy Files or Folders - logical acquisition with hashing in MD5, SHA1, and SHA256.These plug-ins gather data from the suspect's system and deliver that information to the logs. MacForensicsLab Incorporated have included many built in plug-ins to be shipped with MacLockPick II. Built-in plug-ins - pre configured digital investigative tools.These plug-ins are broken into 5 different categories MacLockPick is built on a plug-in architecture in order to allow the investigator greater control over which processes are run in the field. This information might include files of a specific type, chat logs, phone records, browser history, passwords, accounts, and system state data. Through the use of a plug-in architecture MacLockPick II can be configured to collect almost any kind of information depending on the needs of the investigator. Such information includes details about the system, activities of the user of that system, and the online history of that user.
MacLockPick II is designed to capture information that might be considered valuable to an IT manager, an E-Discovery professional, or a digital forensics law enforcement officer. What data is captured from the suspect's computer
In addition, MacLockPick II is minimally evasive, providing results that can hold up in a court of law. MacLockPick II is the only cross platform solution on the market and therefore the best chance of successfully capturing data critical to any investigation involving running computers.
#MACLOCKPICK 3.0 SOFTWARE#
Once the MacLockPick II software is run it will extract the requisite data providing the examiner fast access to the suspect’s critical information, that may otherwise be rendered unreadable by modern encryption programs, hardware malfunctions, or simply powering the system down. The solution is based on a USB Flash drive that is inserted into a suspect’s computer that is running (or sleeping). MacLockPick II™ is an indispensable tool designed for first responders and law enforcement professionals performing live forensic triage on most computer systems. Similarly, once completed, the results of the field triage operation can analyzed on a wide variety of computers.
#MACLOCKPICK 3.0 MAC OS X#
MacLockPick II for Microsoft Windows and Apple Mac OS X is a fully cross platform tool that allows digital forensics professionals and eDiscovery experts to perform field triage on live computers running a wide variety of operating systems. Cross platform forensic field triage for Microsoft Windows and Apple OS X
0 kommentar(er)
