SoftBlock

BlackBag's SoftBlock is a write-blocking software application that identifies devices upon connection and mounts them, depending on user preference, in either a forensically sound read-only manner or a conventional read-write configuration. A kernel-based utility, SoftBlock offers Mac forensic examiners flexibility, security and speed in previewing and analyzing evidence across any number of devices.

SoftBlock includes several distinct features for improving Mac forensic examinations, all in a simple to install and easy to use single utility:

• Mobility. Once installed on your computer, SoftBlock is always readily available for use, which means one less piece of equipment to manage while you're on the go.
• Speed. Mount and manage devices directly from your computer, and conduct a quick preview before further analysis, expediting your investigation process.
• Affordability. As a single utility, with seamless workflow integration and nearly unlimited capacity, SoftBlock costs much less than the hardware blockers needed to manage a comparable load.
• Security. Safeguards such as "Always On" protection and double confirmation required before mounting new devices read-write preserve evidence in tact.