💾Analyzing Disk Images with Sleuth Kit and Brunnhilde on macOS (How It Differs from Copying a Folder)
A record of running Sleuth Kit (fls/icat/fiwalk/tsk_recover/mmls) and Brunnhilde on macOS against a FAT16 test image, to see how recovering deleted files and analyzing a disk image differs from simply copying a folder.
sleuthkitbrunnhildemacosデジタルアーカイブ