Skip to content

ydkhatri/APFS_010

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

37 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

APFS_010

This is an 010 Editor template for APFS. It was initially a port of apfs.ksy with some additions/modifications. Since then, Apple released the official specification, and this template has been accordingly updated to add most of the structures used in APFS.

This template contains most of the changes included in the last spec update by Apple on 2020-06-22.

License

MIT

Usage

To use the template, simply load your raw disk (or container) image into 010. Then run template.

If the image is encrypted, you will still be able to navigate to the encrypted blocks, but not read any further. On encrypted volumes, you will not be able to get to file listings or file contents as the disk blocks for data and metadata are encrypted!

Screenshots

Template output after run

Template output showing inode structure

Contribute

Feel free to submit changes (pull requests) here.

About

010 template for apfs

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published