Demo
See macfor in action with a live demonstration of macOS forensic collection.
Request a Live Demo
Want to see macfor collect from a Mac before you try it? Our team can walk you through a collection with your specific use case in mind.
Contact us to schedule a live demo session.
Quick Start
Ready to try it yourself? macfor Collector Community Edition is free and open source, and installs with Homebrew:
# Install macfor
brew install macfor-io/tap/macfor
# Run your first collection
sudo macfor collect --output evidence.zip
Grant your terminal Full Disk Access first, or macOS will block protected artifacts. See the getting started guide for detailed instructions.