Disk Arbitrator
#Incident Management#Digital Forensics
A shell script for basic forensic collection of various artefacts from UNIX systems.
Disk Arbitrator: A Forensic Utility for Mac OS X
Disk Arbitrator is a forensic utility designed for Mac OS X that offers a user-friendly interface to the Disk Arbitration framework. This tool ensures that proper forensic procedures are adhered to during the process of disk imaging. When activated, it prevents file systems from being mounted, which stops read-write access. This feature works alongside write-blockers, providing additional capabilities to enhance data integrity.