[sleuthkit-users] Sleuthkit APFS parsing (APSB Block Number)

[Jake J. 4. <Jak...@ke...>]

Good afternoon,

I am currently trying to use the Sleuthkit to be able to open .E01 files containing APFS images and extracting certain files. In order to do this I need to be able to calculate the starting APSB block of the volume in question. When I load the image into Autopsy the number is automatically determined, how is this done in Sleuthkit?

Kind regards,

Jake Jackson
This email and any other accompanying document(s) contain information from Kent Police and/or Essex Police, which is confidential or privileged. The information is intended to be for the exclusive use of the individual(s) or bodies to whom it is addressed. The content, including any subsequent replies, could be disclosable if relating to a criminal investigation or civil proceedings. If you are not the intended recipient, be aware that any disclosure, copying, distribution or other use of the contents of this information is prohibited. If you have received this email in error, please notify us immediately by contacting the sender or telephoning Kent Police on 01622 690690 or Essex Police on 01245 491491, as appropriate. For further information regarding Kent Police's or Essex Police's use of personal data please go to https://www.kent.police.uk/hyg/privacy/ or https://www.essex.police.uk/hyg/privacy/. Additionally for our Terms and Conditions please go to https://www.kent.police.uk/hyg/terms-conditions/ or https://www.essex.police.uk/hyg/terms-conditions/