Minoru Kobayashi

You can modify the upper limit of snapshots. The default is 99. https://github.com/mnrkbys/libvshadow-vss_carver/blob/vss_carver/vshadowtools/mount_file_entry.c#L675 Of course, you have to compile libvshadow after modification. Incidentally, in the latest source code, the upper...

Hi, @uckelman-sf I have tried your aff4_support branch on macOS 10.15.7. PRIuOFF has been removed since 4.7.0, so it occurs compilation errors like below: ``` aff4.c:49:60: error: expected ')' tsk_error_set_errstr("aff4_image_read...

I have uploaded here. https://1drv.ms/u/s!Aj92UJs3UQTPg-B_9W_Jl8waI_hA2w?e=2E8D9D It can be downloaded until Aug 6, 2022.

Thanks for your reply. I have modified the code like below. https://github.com/mnrkbys/mac_apt/commit/15f8b363522144136604642c3888063efa8f6f3a Then I have attached a zipped output file here. [lzvn_error_raw_data.zip](https://github.com/ydkhatri/mac_apt/files/9231056/lzvn_error_raw_data.zip)

I found the difference between the dumped data and the data compressed with liblzfse (see attached image below). 0000000000000000_1172_3442.bin is the dumped data from the disk image. It corresponds to...

Ok, I have modified the code and PRed #88 . Please check it.

Thanks for checking. I will modify it later.

I have updated apfs_reader.py twice (https://github.com/ydkhatri/mac_apt/pull/88/commits/fe12c7c9bc61f5bd4e71e95873b679afd157b372 and https://github.com/ydkhatri/mac_apt/pull/88/commits/5f016de3a02f60539694bb80b27ff95051591fcb). The first one is an update of https://github.com/ydkhatri/mac_apt/pull/88/commits/afe5fb92a65687ee290f25109516b70fcd783db0. Both versions work properly. And I have also tested to parse compressed stream with...

Thanks. I got it. Do you have a plan to support LC_UNIXTHREAD?

If I have time, I will do it.