![]() If you have X-Ways, you can download the plug-in here. X-Ways has APFS support and allows ingesting AFF4 images by using a third-party plugin from Evimetry. AFF4 support is currently very limited in most mainstream tools. What options you have depends largely on what tools you have access to. The AFF4 image of a T2 Mac is more along the lines of a physical image, with some restrictions such as unallocated space being still encrypted (as of this writing). The sparse image is a bit more flexible as it can be mounted natively on a Mac without extra tools, but it is a logical image. AFAIK, the two leading Mac acquisition solutions on the market today image Macs with the T2 chip to AFF4 or to a logical image such as a sparse image, or export the data to loose files.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |