Cellebrite - Digital Collector
- Built for Apple Hardware: Full support for M1~M4 and T2 chips.
- Forensic Write-Blocking: Ensures data integrity during acquisition.
- Live & Boot Modes: Captures data from running or powered-off systems.
Cellebrite Digital Collector is a robust acquisition tool designed for complex hardware and encrypted systems. It enables investigators to safely capture hundreds of digital artifacts and perform both logical and physical imaging on-site.
Description
- Overcoming Modern Mac Challenges: As the most mature Mac acquisition solution, Digital Collector is fully compatible with Apple Silicon and T2 chip devices. Whether handling complex APFS file systems or decrypting FileVault 2 volumes, it ensures a smooth and complete acquisition process.
- Physical and Logical Acquisition: Digital Collector supports multiple acquisition methods to meet diverse investigative needs. Perform full Physical Imaging for bit-for-bit data or choose precise Logical Acquisition for specific files and user accounts to save time.
- Live and Volatile Data Collection: In a "Live" state where the system is running, Digital Collector helps capture critical Volatile Data, including RAM, network connections, and system processes, preserving key evidence that would otherwise be lost upon shutdown.
- Forensic Protection and Standard Output: Built-in strict Write-Blocking mechanisms prevent any data alteration during acquisition. Output images support industry-standard formats, ensuring seamless integration with Cellebrite Inspector or other forensic tools to maintain the chain of custody.