-
Mounting VMDK on macOS
The libvmdk library allows you to access the VMware Virtual Disk (VMDK) format. This post covers how to use the tools from the
libvmdklibrary to manage VMDK files via Terminal on macOS. -
Forensic Logical Acquisition of Apple Silicon Mac
As the Apple Silicon Mac devices become increasingly prevalent, understanding the unique challenges posed by these devices in digital forensics is paramount. By delving into the process of forensic acquisition of storage data, this post introduces the ASLA (Apple Silicon Logical Acquisition) script designed to facilitate and perform, whenever possible, the logical acquisition of Apple Silicon Macs. Remember that (till now) in case of Apple Silicon Macs enabled with FileVault encryption, you must know the password in order to perform the acquisition.