MacForensicsLab (http://www.macforensicslab.com) has updated
MacLockPick — a live forensics tool for extracting passwords,
Internet history, and system settings from a suspect’s Mac OS X
computer — to version 2.2, which sports a streamlined user interface.
Designed for law enforcement professionals, it’s based on a USB Flash
drive that can be inserted into a suspect’s Mac OS X computer that is
running (or sleeping). Once the MacLockPick software is run it will
extract data from the Apple Keychain and system settings to provide
the examiner fast access to the suspect’s critical information with
as little interaction or trace as possible. A database of the
suspect’s information is compiled on the Flash drive to allow for
transportation away from the suspect’s system. This database can be
read by the included log readers on Mac OS X, Windows or Linux
computers.
MacLockPick isn’t for sale to the general public. Purchasers will be
required to provide proof that they are a licensed law enforcement
professional. Users are required to ensure that the use of this
technology is legal on federal, state, and local level. Licensed
investigators and law enforcement professionals can purchase
MacLockPick for US$499.95.