**********************************************************************
LLIMAGER v3.8
Mac Computers Forensic Imager
Logical Image of Folders
Acquisition log details
**********************************************************************
Case Summary:
Case_Name: Your case name
Agent_Name: Your Name
OSversion: macOS 14.1.1
Serial_Number: 47RHKGYWRJ
Model_Number: Mac14,2
Start_time: Tue Dec 5 12:25:44 EST 2023
**********************************************************************
Hardware:
Hardware Overview:
Model Name: MacBook Air
Model Identifier: Mac14,2
Model Number: MLY33LL/A
Chip: Apple M2
Total Number of Cores: 8 (4 performance and 4 efficiency)
Memory: 8 GB
System Firmware Version: 10151.41.12
OS Loader Version: 10151.41.12
Serial Number (system): 47RHKGYWRJ
Hardware UUID: 130E90CB-E98C-56F4-A251-C55BBEC24E3D
Provisioning UDID: 00008112-000471DA21DBC01E
Activation Lock Status: Disabled
**********************************************************************
Source Disk Information
Device Identifier: disk3s1s1
Device Node: /dev/disk3s1s1
Whole: No
Part of Whole: disk3
Volume Name: Macintosh HD
Mounted: Yes
Mount Point: /
Partition Type: 41504653-0000-11AA-AA11-00306543ECAC
File System Personality: APFS
Type (Bundle): apfs
Name (User Visible): APFS
Owners: Enabled
OS Can Be Installed: No
Booter Disk: disk3s2
Recovery Disk: disk3s3
Media Type: Generic
Protocol: Apple Fabric
SMART Status: Verified
Volume UUID: B7AD18B0-AA32-47E8-BDE7-D735A0E76542
Disk / Partition UUID: B7AD18B0-AA32-47E8-BDE7-D735A0E76542
Disk Size: 245.1 GB (245107195904 Bytes) (exactly 478724992 512-Byte-Units)
Device Block Size: 4096 Bytes
Volume Used Space: 10.3 GB (10254770176 Bytes) (exactly 20028848 512-Byte-Units)
Container Total Space: 245.1 GB (245107195904 Bytes) (exactly 478724992 512-Byte-Units)
Container Free Space: 148.1 GB (148076089344 Bytes) (exactly 289211112 512-Byte-Units)
Allocation Block Size: 4096 Bytes
Media OS Use Only: No
Media Read-Only: Yes
Volume Read-Only: Yes (read-only mount flag set)
Device Location: Internal
Removable Media: Fixed
Solid State: Yes
Hardware AES Support: Yes
This disk is an APFS Volume Snapshot. APFS Information:
APFS Snapshot Name: com.apple.os.update-B9BEB63D27BD183CAF94E819C5D4F29F726EDA51D3672F1D3EC69FC59C9FC2D5
APFS Snapshot UUID: B7AD18B0-AA32-47E8-BDE7-D735A0E76542
APFS Container: disk3
APFS Physical Store: disk0s2
Fusion Drive: No
APFS Volume Group: 754EE304-95FD-486E-A314-1512AFD8874B
EFI Driver In macOS: 2235041001000000
Encrypted: No
FileVault: No
Sealed: Broken
Locked: No
APFS Snapshots are defined upon this APFS Volume. Snapshot list: Snapshot UUID: B7AD18B0-AA32-47E8-BDE7-D735A0E76542
Name: com.apple.os.update-B9BEB63D27BD183CAF94E819C5D4F29F726EDA51D3672F1D3EC69FC59C9FC2D5
XID: 76412
Snapshot UUID: 9287B2C0-5E50-467A-AA9A-9AC28BD77E8A
Name: com.apple.os.update-4AB291B82A6F7AF00ABF2EB483404181363A0F0165B9560DE354E11ADC2D1BBF4BADA49469B2D7A403305EFD4A3E8D53
XID: 253343
Snapshot UUID: 1E33D436-909A-442B-BD80-2301039B2738
Name: com.apple.os.update-MSUPrepareUpdate
XID: 253354
**********************************************************************
Acquisition Information:
Logical Image Name: EFI01_FOLDERS.dmg
Logical Image Start Time: Tue Dec 5 12:25:45 EST 2023
Logical Image End Time..: Tue Dec 5 12:53:29 EST 2023
Targeted Folders: /Users
/Applications
/bin
/cores
/opt
/sbin
/usr
**********************************************************************
Hash Information:
Logical Image Name: EFI01_FOLDERS.dmg
Logical Image Hash: 763cf4f4f7cbc7a2766d34abae952ded
Logical Hash Start Time: Fri Dec 5 12:53:30 EST 2023
Logical Hash End Time..: Fri Dec 5 13:56:11 EST 2023
**********************************************************************
