tag:blogger.com,1999:blog-6447283518071683105.post4686993201595169533..comments2023-04-02T10:17:04.631-04:00Comments on Forensic Incident Response: Enter the MAChogflyhttp://www.blogger.com/profile/00741773109962883616noreply@blogger.comBlogger6125tag:blogger.com,1999:blog-6447283518071683105.post-36556307493848610552007-10-20T12:41:00.000-04:002007-10-20T12:41:00.000-04:00I got EnCase 6.71 working within VirtualBox on the...I got EnCase 6.71 working within VirtualBox on the MacBookPro under Linux after adding the appropriate entry in /etc/fstab to allow access for my user for the usb subsystem :-)<BR/><BR/>http://forums.virtualbox.org/viewtopic.php?t=979<BR/>The sharing access violation problem described in this post is a pain, hopefully Apple will resolve this with future updates :*(<BR/><BR/>I have also finally echo6https://www.blogger.com/profile/06162017216837926615noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-49112403090463650672007-10-17T08:37:00.000-04:002007-10-17T08:37:00.000-04:00I tried parallels 3 and wasn't all that happy with...I tried parallels 3 and wasn't all that happy with it. Parallels definitely has some benefits over vmfusion, but I think I'll be sticking with vmware.<BR/><BR/>I've so far tested x-ways on vista in vmfusion and the dongle is happy and the program runs well.hogflyhttps://www.blogger.com/profile/00741773109962883616noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-88958620373593670132007-10-16T15:56:00.000-04:002007-10-16T15:56:00.000-04:00We have MacBook Pro's. Currently I have mine setu...We have MacBook Pro's. Currently I have mine setup with tribble boot OSX, XP, Gentoo Linux.<BR/><BR/>We have vmfusion on order so will look forward to testing it out.<BR/><BR/>I have however tried virtualbox. Unfortunately on Linux with the Mac it is unable to access the USB susbsytem. I've had an EnCase dongle working fine with virtualbox on Linux on another machine. Although the mac versionecho6https://www.blogger.com/profile/06162017216837926615noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-82774474436641492682007-10-10T16:09:00.000-04:002007-10-10T16:09:00.000-04:00What about dongles for EnCase, FTK, Mercury, etc.?...What about dongles for EnCase, FTK, Mercury, etc.? Is anyone having issues with tools in virtual images accessing the dongles plugged into the Mac?<BR/><BR/>MarkAnonymousnoreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-84003877844872674432007-10-10T06:24:00.000-04:002007-10-10T06:24:00.000-04:00Funny you should mention this...we're getting the ...Funny you should mention this...we're getting the same thing for our folks, and I just set up a MacBook Pro with BootCamp, XP SP2 and Parallels...H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-6447283518071683105.post-32401281757269101462007-09-19T12:54:00.000-04:002007-09-19T12:54:00.000-04:00Yes indeed. Some of our forensic investigators are...Yes indeed. Some of our forensic investigators are now using Macs with virtual Windows and Linux images. Not only can they use the multiple platforms, but investigators with little previous Mac experience are gaining valuable handson experience just using and playing with their Macs which leads to increased response, analysis, and tool development for any Mac forensic analysis or incident Anonymousnoreply@blogger.com