{"action":"created","issue":{"url":"https://api.github.com/repos/cugu/afro/issues/2","repository_url":"https://api.github.com/repos/cugu/afro","labels_url":"https://api.github.com/repos/cugu/afro/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/cugu/afro/issues/2/comments","events_url":"https://api.github.com/repos/cugu/afro/issues/2/events","html_url":"https://github.com/cugu/afro/issues/2","id":343770647,"node_id":"MDU6SXNzdWUzNDM3NzA2NDc=","number":2,"title":"not an issue - question regarding creating apfs volume (from failed drive)","user":{"login":"johndpope","id":289994,"node_id":"MDQ6VXNlcjI4OTk5NA==","avatar_url":"https://avatars2.githubusercontent.com/u/289994?v=4","gravatar_id":"","url":"https://api.github.com/users/johndpope","html_url":"https://github.com/johndpope","followers_url":"https://api.github.com/users/johndpope/followers","following_url":"https://api.github.com/users/johndpope/following{/other_user}","gists_url":"https://api.github.com/users/johndpope/gists{/gist_id}","starred_url":"https://api.github.com/users/johndpope/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/johndpope/subscriptions","organizations_url":"https://api.github.com/users/johndpope/orgs","repos_url":"https://api.github.com/users/johndpope/repos","events_url":"https://api.github.com/users/johndpope/events{/privacy}","received_events_url":"https://api.github.com/users/johndpope/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-07-23T19:48:14Z","updated_at":"2018-07-23T21:52:49Z","closed_at":null,"author_association":"NONE","body":"so I have a failed external ssd usb which was running apfs / osx majove. (I plugged it into the wrong usb port after usb disconnected and it died.) \r\n\r\n![img_3521](https://user-images.githubusercontent.com/289994/43099112-0d1570a6-8e8f-11e8-8761-0335e736f3f3.JPG)\r\n\r\nI can easily clone this using clonzilla to iso file or dd. It doesn't seem possible to use drive directly. \r\ndo you have any advice? \r\n\r\nWhile I have been able to dig through drive to detect certain file types - it's not helping me recover the failed partition / directory structure. \r\n```shell\r\nCAPTURE 7/23/2018 3:51:19 PM\r\nRecovery Details\r\nDrive:Physical hard drive 3.64 TB (DISK1:)\r\n# MFT:0\r\n# $Mft:0\r\n# $MftMirr:0\r\n# Index:0\r\n# NT boot sectors:0\r\n# FAT32 boot sectors:2\r\n# FAT16 boot sectors:0\r\n# exFAT boot sectors:0\r\n# HFS+ volume headers:0\r\n# Unused HFS volume headers:0\r\n# HFS node ends:2\r\n# HFS header nodes:0\r\n# APFS NXSBs:134\r\n# APFS APSBs:0\r\n# APFS Blocks:196\r\n# EXT Superblocks:0\r\n# XFS Superblocks:0\r\n# 12-bit FATs:0\r\n# 16-bit FATs:0\r\n# 32-bit FATs:0\r\n# EXFAT FATs:0\r\n# Directory starts:11\r\n# Directory conts:111\r\n# exFAT Directory roots:0\r\n# exFAT Directory starts:0\r\n# exFAT Directory conts:0\r\nDir tracker list:9 entries\r\nFAT analyse list:8 entries\r\nFAT cache:4 entries\r\nCrissCross:Level 1, 104,264 sectors in 18 chunks\r\nCrossCrossMemo:L1/Br100/Dry0\r\nSectors starts:63\r\nCluster starts:356\r\nAll clusters:338\r\nCl sizes:0\r\nFile system list:2 items\r\nSelected file system:FAT32 at sector 4,112, cluster size 8 (511 MB) more...\r\nID:253129999 created 7/23/2018 3:50:30 PM\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/cugu/afro/issues/comments/407213234","html_url":"https://github.com/cugu/afro/issues/2#issuecomment-407213234","issue_url":"https://api.github.com/repos/cugu/afro/issues/2","id":407213234,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNzIxMzIzNA==","user":{"login":"cugu","id":653777,"node_id":"MDQ6VXNlcjY1Mzc3Nw==","avatar_url":"https://avatars2.githubusercontent.com/u/653777?v=4","gravatar_id":"","url":"https://api.github.com/users/cugu","html_url":"https://github.com/cugu","followers_url":"https://api.github.com/users/cugu/followers","following_url":"https://api.github.com/users/cugu/following{/other_user}","gists_url":"https://api.github.com/users/cugu/gists{/gist_id}","starred_url":"https://api.github.com/users/cugu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cugu/subscriptions","organizations_url":"https://api.github.com/users/cugu/orgs","repos_url":"https://api.github.com/users/cugu/repos","events_url":"https://api.github.com/users/cugu/events{/privacy}","received_events_url":"https://api.github.com/users/cugu/received_events","type":"User","site_admin":false},"created_at":"2018-07-23T21:52:49Z","updated_at":"2018-07-23T21:52:49Z","author_association":"OWNER","body":"Well, whatever software you are using seems to detect the APFS NXSBs, but FAT32 is selected for recovery.\r\n\r\nAnother approach is that you can try to list the partitions with the sleuthkit: `mmls disk.dd` and than proceed as described in the README."}}
{"actor":{"display_login":"cugu"}}