jfarley248 / APFS_010

010 template for apfs

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

APFS_010

This is an 010 Editor template for APFS. It was initially a port of apfs.ksy with some additions/modifications. Since then, Apple released the official specification, and this template has been accordingly updated to add most of the structures used in APFS. The original ksy file is located here: https://github.com/cugu/apfs.ksy

License

MIT

Usage

To use the template, simply load your raw disk (or container) image into 010. Then run template.

If the image is encrypted, you will still be able to navigate to the encrypted blocks, but not read any further. On encrypted volumes, you will not be able to get to file listings or file contents as the disk blocks for data and metadata are encrypted!

Template output after run

Contribute

Feel free to submit changes (pull requests) here.

About

010 template for apfs

License:MIT License