Now we can use this method again but using OS X 10.6 on the new SATA DIMM drives on the new Mac Airs.
#OS X VM SLEEPIMAGE INSTALL#
was to install OS X 10.5 to an external hard disk, make sure disk arbitration was turned off, and the image using command line binaries like dcfldd or dc3dd. All that was needed, was to Load SPADA into ram, connect an external drive, and image.ģ. This method was helpful because it removed the necessity to have a USB hub. Remove the drive from the Air and image using adapters and normal free imaging toolsĢ. There were 3 basic ways to image the Air.ġ. The latest generation has SATA DIMM drives, a first of it’s kind. future generations were typically the same but had larger hard drives. The older Airs, had both Serial ATA and SSD drived with 64GB and larger. Sales of this generation was a good sign for Apple and the life cycle of this model.īack in 2009 I developed methods to image the Apple Air. It didn’t have much of a following until 2010 when the New Mac Book Air was announced. MacBook Air was introduced in 2008 and was the thinnest and lightest Mac ever made. If you have any questions drop me an email. Just unzip the files and bring them into Encase or FTK using the same method as described above. It is just that simple!įor older Lantern version 1 case files. Then you can run whatever process you care to do at this time. Then just drag and drop the Lantern folder into Encase as seen below,ħ. Open You windows base forensic tool, in this demonstration open Encase and create a case.Ħ. Windows 7 sees this package as a folder.ĥ. The Lantern case file in 2.0 is an Apple/Mac package. As you see in the following figure, the case file looks like a file folder. Copy the Lantern case file (the icon that looks like a briefcase) and bring it into Windows. Depending on your VM software, set up file sharingĤ.
Just like it better now, but again, if you have VMware Fusion, this will work also.ģ.
For this demonstration I am using Parallels. Unfortunately I do not have FTK running in my VM, so this method can also work the same way. So here it is using a case folder using the new Lantern 2. Shafik he asked me to place this blog so that others can benefit from this as well.
#OS X VM SLEEPIMAGE HOW TO#
My good friend Shafik Punja asked “Remember how you showed me to take a Lantern case file and bring it into Encase?” I responded that I did remember showing him how to do it.
0 kommentar(er)
