MacForensicsLab Write Controller is a software write-blocker. Write Controller prevents the Mac from automatically mounting volumes and maintains the integrity of suspect data, providing a layer of protection when working with important information. This allows a forensic examiner to image or explore the drive without fear of writing to it and compromising evidence. It offers an additional layer of security to prevent writing in addition to traditional hardware write-blockers.

MacForensicsLab Write Controller lets the user enable and disable automatic mounting (also known as Disk Arbitration) with the single click of a button. It also gives the user the ability to mount and unmount volumes connected to their machine.

Write Controller offers Mac forensic examiners increased security, flexibility, and speed in imaging, previewing and analyzing evidence on their Mac workstation. Not having to carry around a hardware write blocker can lighten the load an investigator has to carry and increase the speed of the investigation since there is no additional hardware to connect.

Forensic investigators can conduct a quick preview before further analysis, to help in expediting the investigation process. This may help an investigator zero in on specific devices that may be of the most interest during the investigation. Doing so can help narrow the investigation down their search and analysis from dozens of devices to one or only a couple and can save a great deal of time for investigators. This ability to preview the evidence before full analysis can be the difference between life and death in a very time sensitive matter.