About Chris Grettenberger

This author has not yet filled in any details.
So far Chris Grettenberger has created 4 blog entries.

Utilizing RECON LAB to reveal data that other tools miss

MacOS is notoriously hard to work with when it comes to forensics. Things that are simple and routine for a Windows investigation become laborious and confusing in the Mac world. Introductions like APFS, Secure Enclave, and proprietary processors have made navigating Mac forensics with a Windows machine almost impossible. With a Windows-based tool, you may [...]

By |2022-09-30T10:59:03-04:00October 19th, 2021|Categories: Blog|Comments Off on Utilizing RECON LAB to reveal data that other tools miss

RECON ITR plus RECON LAB

Some combinations are unbeatable. Peanut butter and jelly, macaroni and cheese, Hall and Oates, pairings like these create something totally unique. When it comes to Mac forensics, we have our own iconic duo, RECON ITR and RECON LAB. If you are doing macOS acquisitions with RECON ITR, that is only half the battle. RECON LAB [...]

By |2022-09-30T11:07:39-04:00July 28th, 2021|Categories: Blog|Comments Off on RECON ITR plus RECON LAB

How to Image an Apple Silicon Mac with RECON ITR Live

Apple has made significant changes to the Mac lineup when transitioning from Intel processors to their Apple M1 Chip (Apple Silicon). Since then, forensic examiners have been confused about how to image and process Macs with Apple’s new proprietary processor.  At SUMURI, we want to put that confusion at ease by informing all forensic examiners [...]

By |2021-11-12T10:42:31-05:00February 9th, 2021|Categories: Blog|Comments Off on How to Image an Apple Silicon Mac with RECON ITR Live

RAM IMAGING WITH RECON ITR

Obtaining the volatile data stored in RAM through the process of RAM imaging has always been an essential part of Digital Forensics. RAM imaging provides examiners a means of obtaining invaluable information to assist with investigations; for example: Passwords Open Files Running Application Network Connections Imaging RAM in the Mac environment has always been [...]

By |2020-08-05T10:19:38-04:00August 4th, 2020|Categories: Blog, RECON|Tags: , , , |0 Comments

Title

Go to Top