DMG2IMG
#Incident Management#Digital Forensics
Powerful tool for searching and hunting through Windows forensic artefacts with support for Sigma detection rules and custom Chainsaw detection rules.
DMG2IMG: A Tool for Converting DMG Archives
DMG2IMG is a tool that enables users to convert Apple compressed dmg archives into standard image disk files (hfsplus).
This Tool Supports zlib, bzip2, and LZFSE Compressed DMG Images
This tool is designed to handle dmg images that are compressed using zlib, bzip2, or LZFSE formats.
Usage:
dmg2img [-l] [-p N] [-s] [-v] [-V] [-d] [ | -]
or
dmg2img [-l] [-p N] [-s] [-v] [-V] [-d] -i -o
Options:
-s (silent)
-v (verbose)
-V (extremely verbose)
-d (debug)
-l (list partitions)
-p N (extract only partition N)
For platform-specific instructions on how to open or mount the resulting output file, please refer to the original README file.
The original author is vu1tur, visit the website here
//vu1tur.eu.org/dmg2img
This Git Repository is Managed by Peter Wu
This Git repository is managed by Peter Wu, and it can be found at https://github.com/Lekensteyn/dmg2img. It is based on imported tarballs.
It includes bug and security fixes, along with additional enhancements.
This update includes fixes for bugs and security vulnerabilities, as well as further enhancements to improve functionality.
**Building Required Packages:**
- zlib1g-dev (provides zlib support)
- libbz2-dev (provides bzip2 support)
- libssl-dev (required only for vfdecrypt; not necessary for dmg2img)
LZFSE decompression support requires the LZFSE library, which can be obtained from https://github.com/lzfse/lzfse/. Since this library is not commonly included in Linux distributions, it is not enabled by default.
To build dmg2img, use the command: `make dmg2img`.