SubRosaSoft.com (http://www.macforensicslab.com/) has released MacForensicsLab Write Controller 1.0, a software write-blocking application. It prevents the Mac from automatically mounting volumes and maintains the integrity of suspect data, providing a layer of protection when working with important information.
By default, Mac OS X automatically mounts the volumes of any device when connected to the Mac. If a suspect drive is connected directly to the Mac with mounting turned on, the Mac OS will immediately update the drive with system related information which could compromise the integrity of the evidence.
Write Controller allows an investigator to control this behavior and prevent automatic mounting which prevents accidental writing to the drive. The software also has the flexibility to allow the user to mount and unmount volumes.
MacForensicLab Write Controller is now available at the manufacturer’s suggested retail price of US$149 ($135 for licensed law enforcement). It requires Mac OS X 10.4 or above.