Quick walkthrough to backup, mount and image a TC sparse bundle forensically
- Connect to the TC using AirportUtility
- Backup the internal volume to an external USB-Drive
(HDD has to be min. same size) - Mount the created sparse bundles
hdiutil attach –readonly –nomount ComputerName.sparsebundle/ - Create the forensic image
using MacOSForensicImager
How to forensically mount/image a (Time Capsule) Sparsebundle weiterlesen