Support for APFS Snapshots and Extended Attributes from Macs with T2 Chipsets!

Image any drive with FileVault and T2 Chipset encryption

RECON IMAGER PRO – Logical Imaging with Automatic Artifact Collection and Imaging Across a Network

Image Mac RAM without an admin password

Rolling updates to stay ahead of the technological curve

The next generation of forensic imaging is here!

RECON IMAGER is the leading imaging solution for Macs. RECON IMAGER takes the guesswork out of advanced imaging processes so you can focus on the broader task at hand, and get more work done, faster. With pricing starting at $399, RECON IMAGER is an industry leading value you simply won’t find anywhere else.

Imaging all Intel® Macs and APFS just got easier

RECON IMAGER is ready to image all Intel® based Apple computers, including the newest generation of MacBook Pro with Touch Bar with APFS and T2 Chipsets. No more waiting for other solutions to catch up to the latest technology to do what RECON IMAGER can do today.

Image any drive with FileVault and T2 Chipset encryption

RECON IMAGER automatically and easily identifies, displays and interprets Apple FileVault, Fusion and Core Storage volumes and disks which saves you time later. 

Decrypted forensic images of FileVault volumes can be made by entering the user’s password or Recovery Key in RECON IMAGER.

 

Image Mac RAM without an admin password

Imaging Mac RAM typically requires an admin password. The RECON IMAGER boot environment allows you to image Mac RAM with no password. This provides you with the ability to recover artifacts from previous sessions such as private web browsing, documents, chat messages, passwords and much more!

RECON IMAGER PRO

Are you limited to gathering data from only one individual’s account? Do you need to save time by imaging only specific directories? RECON IMAGER PRO allows you to customize what is imaged by selecting whatever files or folders that are of interest to you.

Additionally, we have added the ability to automatically collect macOS artifacts for all user accounts or just one which can be processed automatically in RECON LAB!

New with Version 4! Image across a network to an evidence server or NAS!

Rolling updates to stay ahead of the technological curve

RECON IMAGER features a rolling update structure. As soon as a new build of macOS becomes available, updates will be issued that keep RECON IMAGER current, enabling you to stay on the cutting edge of macOS imaging, no matter what.

DEMO REQUEST

Where to find your USB Serial Number? Click on the Apple Menu > About this Mac > System Report > USB
*All fields required to process this request