{"id":14881,"date":"2021-12-30T00:00:00","date_gmt":"2021-12-30T00:00:00","guid":{"rendered":"https:\/\/adfsolutions.com\/mac-forensics\/"},"modified":"2026-02-18T13:35:34","modified_gmt":"2026-02-18T13:35:34","slug":"mac-forensics","status":"publish","type":"post","link":"https:\/\/adfsolutions.com\/mac-forensics\/","title":{"rendered":"Mac Forensics: Learn to acquire digital evidence on MacOS computers"},"content":{"rendered":"\n<p>ADF Solutions has been committed to the forensic market for well over 15 years and has continually improved its product offerings as we continue to move forward. As a company, we are focused on solutions \u2026 it\u2019s even in our name. You\u2019re trying to solve investigations. We\u2019re focused on developing technology solutions that will help you do your job faster with a primary focus of helping you protect victims. A pretty good reason to wake up and go to work each day.<\/p>\n<!--more-->\n<p style=\"font-weight: normal; font-size: 18px;\"><span style=\"color: #666666;\"><img decoding=\"async\" src=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/2-4.png\" alt=\"2-4\" width=\"351\" loading=\"lazy\" style=\"width: 351px; float: right;\"><\/span><span style=\"color: #666666;\">As a company, our technological foundations are rooted in <span style=\"color: #0c5394;\"><a href=\"https:\/\/www.adfsolutions.com\/news\/what-is-forensic-triage\" style=\"color: #0c5394; text-decoration: none;\">forensic triage<\/a><\/span>. Our early years were spent creating software specifically for image identification and analysis for <span style=\"color: #0c5394;\"><a href=\"https:\/\/www.adfsolutions.com\/news\/what-is-csam\" style=\"color: #0c5394; text-decoration: none;\">child exploitation<\/a><\/span>. Our immediate value as a triage tool was in providing on-scene intelligence and capture of potential evidentiary information and has since morphed into solutions that are easier to use for investigators and which help reduce case backlogs.&nbsp;<\/span><span style=\"color: #666666;\"><\/span><\/p>\n<p>What has transpired over the years has been an evolution of our forensic software technology to not merely include support for hundreds of file types and artifacts, but a better way to link all that information quicker than any other solution on the market. The theme has remained consistent in our mission statement: help investigators and examiners get to the relevant information faster.<\/p>\n<h3 style=\"font-size: 20px; font-weight: bold;\"><span style=\"color: #038d9f;\">Computer Forensics for macOS<\/span><\/h3>\n<p>In our last release we took a bold step forward with the ability to access the <a href=\"https:\/\/www.adfsolutions.com\/news\/macos-forensics-live-scan-macs-with-t2-m1-chips-adf-triage\"><span>new M1 and T2 Mac computers<\/span><\/a> by directly connecting to an ADF workstation. That release also brought the software up to date with the latest Mac software including Big Sur. With our new release, we have improved that ability and given forensic examiners and investigators three different options for connecting to macOS computers.<\/p>\n<p>With ADF software tools, investigators can now connect to Mac computers via direct ethernet connection using recovery mode and the ADF Remote Agent. Direct ethernet connection and recovery mode are the preferred methods as it is faster and give you access to more data.&nbsp;<\/p>\n<p><a class=\"optech-default-btn btn-style cta_button\" href=\"https:\/\/cta-redirect.hubspot.com\/cta\/redirect\/4330725\/b4e30cdf-d916-4c68-b5f9-e59edeac1c1e\" target=\"_blank\" data-text=\"Mac Forensics: Learn to Boot for macOS with M1 and T2 Chips\"><span class=\"btn-wraper\">Mac Forensics: Learn to Boot for macOS with M1 and T2 Chips<\/span><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ADF Solutions has been committed to the forensic market for well over 15 years and has continually improved its product offerings as we continue to move forward. As a company, we are focused on solutions \u2026 it\u2019s even in our name. You\u2019re trying to solve investigations. We\u2019re focused on developing technology solutions that will help&#8230;<\/p>\n","protected":false},"author":3,"featured_media":13275,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[63],"tags":[146,95,72,74],"class_list":["post-14881","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-apple-mac-forensics","tag-computer-forensics","tag-computer-triage","tag-digital-evidence-investigator","optech-blog blog-single"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/adfsolutions.com\/mac-forensics\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions\" \/>\n<meta property=\"og:description\" content=\"ADF Solutions has been committed to the forensic market for well over 15 years and has continually improved its product offerings as we continue to move forward. As a company, we are focused on solutions \u2026 it\u2019s even in our name. You\u2019re trying to solve investigations. We\u2019re focused on developing technology solutions that will help...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/adfsolutions.com\/mac-forensics\/\" \/>\n<meta property=\"og:site_name\" content=\"ADF Solutions\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/adfsolutions\" \/>\n<meta property=\"article:published_time\" content=\"2021-12-30T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-18T13:35:34+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Richard T. Frawley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:site\" content=\"@adfsolutions\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Richard T. Frawley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/\"},\"author\":{\"name\":\"Richard T. Frawley\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\"},\"headline\":\"Mac Forensics: Learn to acquire digital evidence on MacOS computers\",\"datePublished\":\"2021-12-30T00:00:00+00:00\",\"dateModified\":\"2026-02-18T13:35:34+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/\"},\"wordCount\":351,\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png\",\"keywords\":[\"Apple Mac Forensics\",\"Computer Forensics\",\"Computer Triage\",\"Digital Evidence Investigator\"],\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/\",\"url\":\"https:\/\/adfsolutions.com\/mac-forensics\/\",\"name\":\"Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions\",\"isPartOf\":{\"@id\":\"https:\/\/adfsolutions.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png\",\"datePublished\":\"2021-12-30T00:00:00+00:00\",\"dateModified\":\"2026-02-18T13:35:34+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/adfsolutions.com\/mac-forensics\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png\",\"width\":1600,\"height\":900},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/adfsolutions.com\/mac-forensics\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/adfsolutions.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Mac Forensics: Learn to acquire digital evidence on MacOS computers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/adfsolutions.com\/#website\",\"url\":\"https:\/\/adfsolutions.com\/\",\"name\":\"ADF Solutions\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/adfsolutions.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/adfsolutions.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/adfsolutions.com\/#organization\",\"name\":\"ADF Solutions\",\"url\":\"https:\/\/adfsolutions.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"contentUrl\":\"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png\",\"width\":512,\"height\":512,\"caption\":\"ADF Solutions\"},\"image\":{\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/adfsolutions\",\"https:\/\/x.com\/adfsolutions\",\"https:\/\/www.linkedin.com\/company\/adf-solutions\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39\",\"name\":\"Richard T. Frawley\",\"url\":\"https:\/\/adfsolutions.com\/author\/richardtfrawley\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/adfsolutions.com\/mac-forensics\/","og_locale":"en_US","og_type":"article","og_title":"Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions","og_description":"ADF Solutions has been committed to the forensic market for well over 15 years and has continually improved its product offerings as we continue to move forward. As a company, we are focused on solutions \u2026 it\u2019s even in our name. You\u2019re trying to solve investigations. We\u2019re focused on developing technology solutions that will help...","og_url":"https:\/\/adfsolutions.com\/mac-forensics\/","og_site_name":"ADF Solutions","article_publisher":"https:\/\/www.facebook.com\/adfsolutions","article_published_time":"2021-12-30T00:00:00+00:00","article_modified_time":"2026-02-18T13:35:34+00:00","og_image":[{"width":1600,"height":900,"url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png","type":"image\/png"}],"author":"Richard T. Frawley","twitter_card":"summary_large_image","twitter_creator":"@adfsolutions","twitter_site":"@adfsolutions","twitter_misc":{"Written by":"Richard T. Frawley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/adfsolutions.com\/mac-forensics\/#article","isPartOf":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/"},"author":{"name":"Richard T. Frawley","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39"},"headline":"Mac Forensics: Learn to acquire digital evidence on MacOS computers","datePublished":"2021-12-30T00:00:00+00:00","dateModified":"2026-02-18T13:35:34+00:00","mainEntityOfPage":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/"},"wordCount":351,"publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"image":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png","keywords":["Apple Mac Forensics","Computer Forensics","Computer Triage","Digital Evidence Investigator"],"articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/adfsolutions.com\/mac-forensics\/","url":"https:\/\/adfsolutions.com\/mac-forensics\/","name":"Mac Forensics: Learn to acquire digital evidence on MacOS computers - ADF Solutions","isPartOf":{"@id":"https:\/\/adfsolutions.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage"},"image":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage"},"thumbnailUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png","datePublished":"2021-12-30T00:00:00+00:00","dateModified":"2026-02-18T13:35:34+00:00","breadcrumb":{"@id":"https:\/\/adfsolutions.com\/mac-forensics\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/adfsolutions.com\/mac-forensics\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/mac-forensics\/#primaryimage","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/Blog-Post-58-1.png","width":1600,"height":900},{"@type":"BreadcrumbList","@id":"https:\/\/adfsolutions.com\/mac-forensics\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/adfsolutions.com\/"},{"@type":"ListItem","position":2,"name":"Mac Forensics: Learn to acquire digital evidence on MacOS computers"}]},{"@type":"WebSite","@id":"https:\/\/adfsolutions.com\/#website","url":"https:\/\/adfsolutions.com\/","name":"ADF Solutions","description":"","publisher":{"@id":"https:\/\/adfsolutions.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/adfsolutions.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/adfsolutions.com\/#organization","name":"ADF Solutions","url":"https:\/\/adfsolutions.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/","url":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","contentUrl":"https:\/\/adfsolutions.com\/wp-content\/uploads\/2026\/01\/favicon.png","width":512,"height":512,"caption":"ADF Solutions"},"image":{"@id":"https:\/\/adfsolutions.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/adfsolutions","https:\/\/x.com\/adfsolutions","https:\/\/www.linkedin.com\/company\/adf-solutions\/"]},{"@type":"Person","@id":"https:\/\/adfsolutions.com\/#\/schema\/person\/f7fc6bb598702f2c7fd213ae40c2ac39","name":"Richard T. Frawley","url":"https:\/\/adfsolutions.com\/author\/richardtfrawley\/"}]}},"_links":{"self":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14881","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/comments?post=14881"}],"version-history":[{"count":2,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14881\/revisions"}],"predecessor-version":[{"id":16636,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/posts\/14881\/revisions\/16636"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media\/13275"}],"wp:attachment":[{"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/media?parent=14881"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/categories?post=14881"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adfsolutions.com\/wp-json\/wp\/v2\/tags?post=14881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}