Urak, an AI digital forensics company, said on Tuesday it has launched DFAS Pro Mac, a forensics solution for Apple's macOS. It said the launch expands its existing Windows-centered forensics response scope to macOS.

The company said DFAS Pro Mac is a forensics solution that supports judgment and decision-making by selecting and analysing digital data on site. It is focused on providing key functions and services from the existing Windows version at the same level in a macOS environment.

The company said a more diverse digital work environment is driving steady growth in the adoption of Mac devices to improve stability and productivity. It said as work-from-home and hybrid work spread and more people use personally owned devices for work, demand for forensics on macOS systems is also rising across areas including internal audits, information leak investigations, incident response and securing evidence for legal disputes.

macOS has had limits for on-site investigations and information audits because its operating system characteristics include a closed security policy and many restrictions on data access. As a result, existing macOS forensics has commonly involved first collecting data from target devices on site and then moving it to an external analysis lab for analysis. During this process, the data that can be analysed could be limited, or data unrelated to the investigation purpose could be collected.

DFAS Pro Mac is provided as an on-site device type that can be used immediately by simply connecting it without separate installation. It is designed to first select and collect and analyse key evidence related to a case. It also offers usability that non-experts without specialised forensics knowledge can use.

Urak is conducting pilot projects at the same time as the launch of DFAS Pro Mac for existing customers including investigative agencies, game developers and major distribution conglomerates, while verifying effectiveness and coordinating adoption timing. It plans to reflect feedback gathered there to strengthen analysis functions for third-party software such as messengers and collaboration tools. It plans to additionally launch a Linux version within the year and advance a multi-OS-based integrated digital forensics platform that can analyse three operating systems, including Windows, macOS and Linux, under a single framework.

Urak CEO Bong-seok Yoo (유봉석) said the macOS forensics solution is not simply the addition of one operating system, but an important milestone for responding to a digital work environment shifting to a multi-OS environment. He said Urak is expanding an integrated digital forensics ecosystem based on practical forensics technology that can be used immediately on site.