Fuji is a free, open-source program for performing forensic acquisition of Mac computers. It should work on any modern Intel or Apple Silicon device, as it leverages standard executables provided by macOS.
Fuji performs a so-called live acquisition (the computer must be turned on) of logical nature, i.e. it includes only existing files. The tool generates a DMG file that can be imported in several digital forensics programs.
It is released under the terms of the GNU General Public License (version 3).
The development of Fuji is empowered by the support of:
|
13Cubed |
If you find my work in open-source digital forensics valuable, please consider supporting it with a donation. Your contributions help sustain the development and maintenance of tools like Fuji.
You can find the latest DMG file on the releases page:
Please make sure to read the documentation on how to prepare your drive:
The following video shows the acquisition process in a live macOS environment:
Mac Imaging Made Easy with Fuji on YouTube
