Forensic Logical Acquisition of Apple Silicon Mac

As the Apple Silicon Mac devices become increasingly prevalent, understanding the unique challenges posed by these devices in digital forensics is paramount. By delving into the process of forensic acquisition of storage data, this post introduces the ASLA (Apple Silicon Logical Acquisition) script designed to facilitate and perform, whenever possible, the logical acquisition of Apple Silicon Macs. Remember that (till now) in case of Apple Silicon Macs enabled with FileVault encryption, you must know the password in order to perform the acquisition.