{"id":14858,"date":"2019-04-05T00:00:00","date_gmt":"2019-04-05T00:00:00","guid":{"rendered":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/"},"modified":"2026-03-11T14:22:23","modified_gmt":"2026-03-11T14:22:23","slug":"boot-scan-mac-apfs","status":"publish","type":"post","link":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/","title":{"rendered":"Digital Forensic Boot Scan a Mac with APFS"},"content":{"rendered":"\n<p>ADF offers the best <a href=\"\/digital-forensics\" rel=\" noopener\">digital forensic<\/a> solution for getting relevant data from an Apple Mac laptop or desktop running APFS since it is easy to use and offers investigators a quick and easy way to&nbsp;collect and analyze evidence.&nbsp; In this short 3-minute&nbsp;video, ADF&#8217;s digital forensic specialist, Rich Frawley shows&nbsp;how to boot&nbsp;a MacBook Air (APFS, non-encrypted) with Digital Evidence Investigator.<\/p>\n<p><!--more--><\/p>\n{% video_player &#8220;embed_player&#8221; overrideable=False, type=&#8217;scriptV4&#8242;, hide_playlist=True, viral_sharing=False, embed_button=False, width=&#8217;1920&#8242;, height=&#8217;1162&#8242;, player_id=&#8217;8704670154&#8242;, style=&#8221;, color=&#8217;fe8b3f&#8217;, play_button_color=&#8217;fe8b3f&#8217; %}\n<p>&nbsp;<\/p>\n<p>The ADF digital forensic team is&nbsp;hard at work putting the finishing touches on the complete package:<\/p>\n<ul>\n<li>Enabling FileVault support at boot<\/li>\n<li>Allowing the input of credentials, much like we currently support <a href=\"\/news\/boot-scan-microsoft-surface-pro\" rel=\" noopener\">digital forensic investigations Surface Pro computers<\/a> with Bitlocker&nbsp;<\/li>\n<\/ul>\n<p>In the meantime, if FileVault is not an issue, ADF software can boot scan and collect the information investigators need to further an investigation or make a case. It is as simple as press and hold the Option key while powering on the Mac. This gives you access to the Startup Manager which will allow you to execute the ADF Software.&nbsp;This is also true for Mac\u2019s prior to the implementation of APFS, ADF will be able to boot to your Mac and get you the relevant information for your case.&nbsp;<\/p>\n<h3>Apple T2 Security Chip<\/h3>\n<p>But what about the new T2 Security Chip?&nbsp;One of the features of the T2 Security Chip is the ability to use Secure Boot to make sure that only a legitimate, trusted operating system loads at startup. That\u2019s good news&nbsp;since ADF utilizes a legitimate, trusted operating system.<\/p>\n<p>Another feature is the ability to exclude booting from an external device, and this would be important to get an APFS Mac to boot to that trusted operating system. If booting from an external device is not available in the Startup Manager, then by accessing the Startup Security Utility (Authentication Required) the settings can be changed to allow booting. Once this has been accomplished you can now use ADF to boot and conduct a scan of the computer.<\/p>\n<br>\n<p>With ADF software, you can conduct digital investigations of&nbsp;a suspect Mac in the lab, or on-scene, easier, faster and smarter to:<\/p>\n<ul>\n<li>Quickly identify incriminating files and artifacts<\/li>\n<li>Easily associate files to victims or a suspect<\/li>\n<li>Create comprehensive court-ready reports<\/li>\n<\/ul>\n<p><a class=\"optech-default-btn btn-style cta_button\" href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/4330725\/1aab4bf4-28b8-4315-ab32-0256182e13eb\" target=\"_blank\" data-text=\"Watch: Boot Scan a Mac with APFS &#038; FileVault 2\"><span class=\"btn-wraper\">Watch: Boot Scan a Mac with APFS &#038; FileVault 2<\/span><\/a><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>ADF offers the best digital forensic solution for getting relevant data from an Apple Mac laptop or desktop running APFS since it is easy to use and offers investigators a quick and easy way to&nbsp;collect and analyze evidence.&nbsp; In this short 3-minute&nbsp;video, ADF&#8217;s digital forensic specialist, Rich Frawley shows&nbsp;how to boot&nbsp;a MacBook Air (APFS, non-encrypted)&#8230;<\/p>\n","protected":false},"author":3,"featured_media":13231,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[63,283],"tags":[159,146,147,96,74,200,98,99,142,143],"class_list":["post-14858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-video","tag-apfs","tag-apple-mac-forensics","tag-boot-scan","tag-computer-forensics-video","tag-digital-evidence-investigator","tag-domex","tag-forensic-triage","tag-how-to-video","tag-triage-g2","tag-triage-investigator","optech-blog blog-single"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Digital Forensic Boot Scan a Mac with APFS - ADF Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Digital Forensic Boot Scan a Mac with APFS - ADF Solutions\" \/>\n<meta property=\"og:description\" content=\"ADF offers the best digital forensic solution for getting relevant data from an Apple Mac laptop or desktop running APFS since it is easy to use and offers investigators a quick and easy way to&nbsp;collect and analyze evidence.&nbsp; In this short 3-minute&nbsp;video, ADF&#8217;s digital forensic specialist, Rich Frawley shows&nbsp;how to boot&nbsp;a MacBook Air (APFS, non-encrypted)...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\" \/>\n<meta property=\"og:site_name\" content=\"ADF Solutions\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adfsolutions\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-05T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-11T14:22:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Richard T. Frawley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:site\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Richard T. Frawley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\"},\"author\":{\"name\":\"Richard T. Frawley\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\"},\"headline\":\"Digital Forensic Boot Scan a Mac with APFS\",\"datePublished\":\"2019-04-05T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:22:23+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\"},\"wordCount\":429,\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png\",\"keywords\":[\"APFS\",\"Apple Mac Forensics\",\"Boot Scan\",\"Computer Forensics Video\",\"Digital Evidence Investigator\",\"DOMEX\",\"Forensic Triage\",\"How To Video\",\"Triage-G2\",\"Triage-Investigator\"],\"articleSection\":[\"News\",\"Video\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\",\"url\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\",\"name\":\"Digital Forensic Boot Scan a Mac with APFS - ADF Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png\",\"datePublished\":\"2019-04-05T00:00:00+00:00\",\"dateModified\":\"2026-03-11T14:22:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png\",\"width\":1600,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/adfsolutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Digital Forensic Boot Scan a Mac with APFS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/adfsolutions.com\/#website\",\"url\":\"https:\/\/adfsolutions.com\/\",\"name\":\"ADF Solutions\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/adfsolutions.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/adfsolutions.com\/#organization\",\"name\":\"ADF Solutions\",\"url\":\"https:\/\/adfsolutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"width\":512,\"height\":512,\"caption\":\"ADF Solutions\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/adfsolutions\",\"https:\/\/x.com\/adfsolutions\",\"https:\/\/www.linkedin.com\/company\/adf-solutions\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\",\"name\":\"Richard T. Frawley\",\"url\":\"https:\/\/adfsolutions.com\/author\/richardtfrawley\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Digital Forensic Boot Scan a Mac with APFS - ADF Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/","og_locale":"en_US","og_type":"article","og_title":"Digital Forensic Boot Scan a Mac with APFS - ADF Solutions","og_description":"ADF offers the best digital forensic solution for getting relevant data from an Apple Mac laptop or desktop running APFS since it is easy to use and offers investigators a quick and easy way to&nbsp;collect and analyze evidence.&nbsp; In this short 3-minute&nbsp;video, ADF&#8217;s digital forensic specialist, Rich Frawley shows&nbsp;how to boot&nbsp;a MacBook Air (APFS, non-encrypted)...","og_url":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/","og_site_name":"ADF Solutions","article_publisher":"https:\/\/www.facebook.com\/adfsolutions","article_published_time":"2019-04-05T00:00:00+00:00","article_modified_time":"2026-03-11T14:22:23+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png","type":"image\/png"}],"author":"Richard T. Frawley","twitter_card":"summary_large_image","twitter_creator":"@adfsolutions","twitter_site":"@adfsolutions","twitter_misc":{"Written by":"Richard T. Frawley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#article","isPartOf":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/"},"author":{"name":"Richard T. Frawley","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39"},"headline":"Digital Forensic Boot Scan a Mac with APFS","datePublished":"2019-04-05T00:00:00+00:00","dateModified":"2026-03-11T14:22:23+00:00","mainEntityOfPage":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/"},"wordCount":429,"publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"image":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png","keywords":["APFS","Apple Mac Forensics","Boot Scan","Computer Forensics Video","Digital Evidence Investigator","DOMEX","Forensic Triage","How To Video","Triage-G2","Triage-Investigator"],"articleSection":["News","Video"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/","url":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/","name":"Digital Forensic Boot Scan a Mac with APFS - ADF Solutions","isPartOf":{"@id":"https:\/\/adfsolutions.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage"},"image":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png","datePublished":"2019-04-05T00:00:00+00:00","dateModified":"2026-03-11T14:22:23+00:00","breadcrumb":{"@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#primaryimage","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-20-1.png","width":1600,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/adfsolutions.com\/boot-scan-mac-apfs\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adfsolutions.com\/"},{"@type":"ListItem","position":2,"name":"Digital Forensic Boot Scan a Mac with APFS"}]},{"@type":"WebSite","@id":"https:\/\/adfsolutions.com\/#website","url":"https:\/\/adfsolutions.com\/","name":"ADF Solutions","description":"","publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adfsolutions.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adfsolutions.com\/#organization","name":"ADF Solutions","url":"https:\/\/adfsolutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","width":512,"height":512,"caption":"ADF Solutions"},"image":{"@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adfsolutions","https:\/\/x.com\/adfsolutions","https:\/\/www.linkedin.com\/company\/adf-solutions\/"]},{"@type":"Person","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39","name":"Richard T. Frawley","url":"https:\/\/adfsolutions.com\/author\/richardtfrawley\/"}]}},"_links":{"self":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/comments?post=14858"}],"version-history":[{"count":2,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14858\/revisions"}],"predecessor-version":[{"id":16751,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14858\/revisions\/16751"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media\/13231"}],"wp:attachment":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media?parent=14858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/categories?post=14858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/tags?post=14858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}