PHysical Decrypted Images from Macs with the T2 Chip

BlackBag Technologies is proud to announce the first and only solution to produce a decrypted physical image of Apple’s latest Mac systems utilizing the T2 chip. Current logical imaging solutions, including functionality available in the previous version of BlackBag’s own MacQuisition tool, and competing solutions like Sumuri Recon and EnCase, miss critical file system information that only this new level of physical access will be able to provide. This vital imaging functionality is available in MacQuisition 2019 R1 and the output is seamlessly ingested for analysis by BlackLight 2019 R1.

Join BlackBag’s Director of Research, Dr. Joe Sylve to learn more about these new images including:

1. Why these new physical images are better than prior logical imaging techniques

2. How to image a system with the T2 chip

3. What changes they can expect when analyzing these new images

4. Details on the new image format needed to support T2 chip and APFS Fusion devices