Hi there, I have a macbook and I need to get access to it to get the files. The owner is in hospital, and won't ever be able to give us a password to the device. It is currently booted and running, presenting with the login screen. I don't know if the disk has full disk encryption, so I'm hesitant to reboot it into recovery mode, as all the disk may no longer be decrypted. The mac is running ssh daemon, and file sharing, but I have no accounts or ssh keys to login with. For the username, I can see the display name, and I'm 95% certain it's one of two values. Any ideas on how to get access? The mac laptop has firewire devices, and the owner works in IT. When I open the lid there is a time machine message: No Backups for 33 Days Connect to a power outlet while your backup disk is available. Power is connected, but I don't know if this is the right disk, or if backup is happening or if the computer has to be logged in to start backup. Any ideas how to proceed? I remember reading years ago about a way to run commands with a specially crafted firewire device, and have plenty of experience in infosec field to attempt this.