{"id":19383,"date":"2017-10-27T15:18:32","date_gmt":"2017-10-27T19:18:32","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=19383"},"modified":"2017-10-27T15:18:32","modified_gmt":"2017-10-27T19:18:32","slug":"biskus-apfs-capture","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2017\/10\/27\/biskus-apfs-capture\/","title":{"rendered":"Biskus APFS Capture"},"content":{"rendered":"<p><a href=\"http:\/\/biskus.com\">Thomas Tempelmann<\/a>:<\/p>\n<blockquote cite=\"http:\/\/biskus.com\">\n<p>The first and only program to read APFS volumes for forensics analysis (DFIR).<\/p>\n<p>While there are many programs available for capturing disk contents in general, Biskus APFS Capture is currently the only one that performs these operations on Apple&rsquo;s new APFS file system format.<\/p><\/blockquote>\n<p>It does not yet support encrypted volumes (even if the password is known).<\/p>","protected":false},"excerpt":{"rendered":"<p>Thomas Tempelmann: The first and only program to read APFS volumes for forensics analysis (DFIR). While there are many programs available for capturing disk contents in general, Biskus APFS Capture is currently the only one that performs these operations on Apple&rsquo;s new APFS file system format. It does not yet support encrypted volumes (even if [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[1395,537,30,32,1529],"class_list":["post-19383","post","type-post","status-publish","format-standard","hentry","category-technology","tag-apple-file-system-apfs","tag-filesystem","tag-mac","tag-macapp","tag-macos-10-13"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/19383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=19383"}],"version-history":[{"count":1,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/19383\/revisions"}],"predecessor-version":[{"id":19384,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/19383\/revisions\/19384"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=19383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=19383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=19383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}