Here is a short PDF on imaging the MacBook Air wth WinFE+FTK Imager
The MacBook Air was introduced in 2008 and was the thinnest and lightest Mac ever made. It didn’t have much of a following until 2010 when the New Mac Book Air was announced. Sales of this generation was a good sign for Apple and the life cycle of this model.
Back in 2009 I developed methods to image the Apple Air. The older Airs, had both Serial ATA and SSD drived with 64GB and larger. future generations were typically the same but had larger hard drives. The latest generation has SATA DIMM drives, a first of it’s kind.
There were 3 basic ways to image the Air.
1. Remove the drive from the Air and image using adapters and normal free imaging tools
2. To use a Linux boot disk like SPADA 4. This method was helpful because it removed the necessity to have a USB hub. All that was needed, was to Load SPADA into ram, connect an external drive, and image.
3. was to install OS X 10.5 to an external hard disk, make sure disk arbitration was turned off, and the image using command line binaries like dcfldd or dc3dd. Now we can use this method again but using OS X 10.6 on the new SATA DIMM drives on the new Mac Airs.
I will later detail all these methods so that all examiners will have the knowledge to image any Air that they encounter and using free methods. The external Hard drive will necessitate the purchasing of OS X.
Come back and see how to handle these devices!!!!