search

cugu / afro

File recovery for APFS
157 stars 16 forks source link

not an issue - readme clarification mmcat #1

Closed johndpope closed 6 years ago

johndpope commented 6 years ago

I took a look at sleuth kit -

https://github.com/sleuthkit/sleuthkit/tree/develop/win32/mmcat

it seems to only run on pc

I'm using mac and it's possible to clone drive/partition with dd using dd sudo dd if=/dev/disk2 of=test.dd bs=1m

am testing this out. These are the instructions - was going to update readme with link to help others - https://www.cyberciti.biz/faq/how-to-create-disk-image-on-mac-os-x-with-dd-command/

presumably this same as mmcat.

cugu commented 6 years ago

The sleuth kit is available for every major platform.

Easiest to install on MacOS is with brew: brew install sleuthkit

mmcat can extract a volume. Your dd command just creates a disk image. The volume extraction still needs to be done before using afro.

johndpope commented 6 years ago

thx

cugu commented 6 years ago

I added some clarification to the README. Thanks for asking ;-)