Mobile Forensics
Mobile Forensics
Mobile Forensics
  • Introduction
  • Preparations
    • Knowledge
    • Safety
    • Trust
    • Backup
  • Methodology
  • Checking Windows Computers
    • Review Programs Launching at Startup
    • Review Running Processes
    • Review Network Connections
    • Extract Data for Further Analysis
  • Checking Mac Computers
    • Review Programs Launching at Startup
    • Review Running Processes
    • Review Kernel Extensions
    • Review Network Connections
    • Review XProtect Logs
    • Extract Data for Further Analysis
  • Checking Smartphones
    • Note: curriculum
    • Smartphone System Architecture
    • Check Devices Linked to Chat Applications
    • Check for Suspicious Messages
    • Monitor Network Traffic
    • Note: Monitoring Network Traffic on Linux
  • Checking Android Devices Basic
    • Review Installed Applications
    • Check Storage
    • Check if the Phone is under Android Device Policy
    • Check if the Phone is Rooted
    • Check if Developer Options is Enabled
    • Analyze Applications
    • Extract Data for Further Analysis
    • Optional : Check for Indicators of Stalkerware Installation
  • Checking Android Devices Advanced
    • Wireshark
    • MVT
    • Other Tools
  • Checking iOS Devices
    • Review iCloud Accounts
    • Review Installed Applications
    • Check for Mobile Device Management Profiles
    • Check for Shortcuts
    • Check for Jailbreaks
    • Enable and Check App Privacy Report
    • Extract Data for Further Analysis
    • Analyzing Extracted Data
    • About Lockdown Mode
  • Checking Devices Remotely
    • Mac Computers
    • Android
  • Concluding a Forensic Gathering
  • References and Further Learning
  • License and Credits
Powered by GitBook
On this page
  • Asking the User to Install Teamviewer
  • Installing Teamviewer
  • Giving Full Access to Teamviewer
  • Connecting to the User Computer
  • Transferring Files
  • Checking the computer
  • Uninstalling Teamviewer
  1. Checking Devices Remotely

Mac Computers

PreviousChecking Devices RemotelyNextAndroid

Last updated 1 year ago

Asking the User to Install Teamviewer

Installing Teamviewer

The user has to first download the from the website. When the .dmg file is downloaded, double click on it, then double click on the icon shown on the screen to start the Installation process.

The installation process is pretty straightforward, you need to accept the license and then install TeamViewer on the computer (it should requires less than 200MB of space).

At the end of the installation process, TeamViewer start the assistant to configure access rights on the system. You can skip this part.

Giving Full Access to Teamviewer

Once it is installed, you should see the TeamViewer window. You now need to configure access rights, go to Help > Check system access.

For each of these steps, you need to click on "Request Access", which opens the relevant system configuration window and let you add TeamViewer in it. For each of them, you will have to first click on the lock icon on the bottom left of the window to get admin right, and then add TeamViewer to the list of applications authorized.

Once you have done all the steps, you should see all three system settings with a green dot written "Allowed". You should now quit TeamViewer and launch it when needed.

Connecting to the User Computer

To connect to the user computer, you have to ask them to give you their id (a 10 digit number) and a password (a six character string including letters and numbers). Enter the user id in the Control Remote Computer part, and enter the password when asked for it.

Transferring Files

You should now have Teamviewer connected. The first step is to copy all the programs you need for this check using the File Transfer tool. Go to the navigation bar at the top and click on Open File Transfer under Files & Extras. You should create a temporary folder, and then transfer all the needed programs from your computer, by selecting them and clicking on Send.

Checking the computer

Uninstalling Teamviewer

Once the check is done, the user should uninstall TeamViewer. To do that, they have to open the app, go to the page TeamViewer > Preferences, go the the Advanced tab and go to the bottom of the page in the Uninstall section. Click on Also delete configuration files and click on Uninstall.

Once the programs are all transferred, you can proceed with the standard checks as described in the part of this guide. Please keep in mind that the connection may be slow and it can take more time than usual.

Mac OS
Mac OS Teamviewer client