Hey all,
I've got a Raw DD image created of a Macbook.
I'm looking to mount it on another Mac to run Mac based VP software on the image.
Here's what I've tried so far in terminal-
hdiutil attach -imagekey diskimage-class=CRawDiskImage -nomount filename
I keep getting- "Image not recognized"
Any help would be greatly appreciated. Thanks for your time.
Cheers,
ZG
Hello,
I do not know if this will help, but Subrosa has a DD to IMG image file conversion software
(http//
Hey all,
I've got a Raw DD image created of a Macbook.
I'm looking to mount it on another Mac to run Mac based VP software on the image.
Here's what I've tried so far in terminal-hdiutil attach -imagekey diskimage-class=CRawDiskImage -nomount filename
I keep getting- "Image not recognized"
Any help would be greatly appreciated. Thanks for your time.
Cheers,
ZG
Queer.
the -nomount option should "force" the mounting even of an "invalid" image.
See
http//www.forensicfocus.com/Forums/viewtopic/t=11444/
It seems like *somehow* MacOSx (at least some recent version) is picky about the file extension, see
http//
try renaming the file with a .dmg extension and
hdiutil attach -nomount -readonly filename.dmg
or
hdiutil attach -nomount filename.dmg
Basically a non-compressed .dmg is a RAW or dd image.
This seems however like US$ 29.95 cheaper (though site registration is required)
https://
jaclaz
No luck on the terminal side of this. I got a working copy and re-named one of the 126 segments of the dd image to dmg. Also tried .iso for the hell of it. Still nothing but "Image not recognized."
The image is good I've loaded it into ftk imager and went into the file system. Good Image.
I'm thinking even if I successfully mounted one of the segments of the dd image that was renamed to .dmg, seems like it would just be a partial image if it ended up mounting. Wouldn't I have to first combine all the segments then rename the image. That's what some of those software tools are claiming they can do.
Should be a script or a freeware tool for this.
zacgiammarrusco,
If you can upload the DD file to a cloud storage service (yours or mine), I will convert the DD file to an IMG file using my Subrosa software at no charge to you.
PM me if you would like me to do this.
Regards,
Larry
Larry thanks for the offer. I ended up just removing the source hard drive hooking it up to a write blocker and plugging it into the other mac to run VP software on. Really no need for an image for my problem. Thanks for the recommendation.
Well, initially you posted about a dd image, NOT about an image divided into a zillion separate files!
A monolithic image is supported by the standard "hdiutil", the same divided in multiple parts/segments is not. (like it is not on *any* OS, unless a "special" driver is used).
As an example on Windows you can use a "normal" driver such as IMDISK to mount a volume image, but if the image is a multi-part set of fragments of the image you need to "insert" in the mounting chain *something* capable of "virtually assemble" the parts, in this case the libsmraw or the libvmdk (among the many libyall libraries by Joachim Metz), and if using the latter you need to add to the recipe a "descriptor file"
http//
jaclaz