RECON ITR

Native support for T2 chips, APFS, CoreStorage, Fusion drives and FileValult.Data can be acquired from a Mac PC regardless of whether the power is on or off.

-Two data acquisition modes: Imager mode / Triage mode.
-A large number of plugins are available to analyze thousands of artifacts from macOS and iOS backups.
-Local time machine snapshot detection / data extraction.
-Comes with SSD 500GB that can also be used as a data extraction destination.

Operating environment / List of compatible Macs

Imager mode

・ MacBook (Early 2015 or newer)
・ MacBook Air (Mid 2012 or newer)
・ MacBook Pro (Mid 2012 or newer)
・ Mac mini (Late 2012 or newer)
・ IMac (Late 2012 or newer)
・ IMac Pro (2017)
・ Mac Pro (Late 2013)
* Mid 2010 / Mid 2012 models are only models with a Metal-compatible graphics card.

Triage mode

· MacOS 10.12 or macOS 10.13 and above
* Varies depending on the intended use.Please contact us for details.