********************************************************************** LLIMAGER v3.8 Mac Computers Forensic Imager Acquisition log details ********************************************************************** Case Summary: Case_Name: EF Civil Case Agent_Name: Lamda B OSversion: macOS 14.1.1 Serial_Number: 47RHKGYWRJ Model_Number: Mac14,2 Start_time: Tue Dec 5 11:17:04 EST 2023 ********************************************************************** Hardware: Hardware Overview: Model Name: MacBook Air Model Identifier: Mac14,2 Model Number: MLY33LL/A Chip: Apple M2 Total Number of Cores: 8 (4 performance and 4 efficiency) Memory: 8 GB System Firmware Version: 10151.41.12 OS Loader Version: 10151.41.12 Serial Number (system): 47RHKGYWRJ Hardware UUID: 130E90CB-E98C-56F4-A251-C55BBEC24E3D Provisioning UDID: 00008112-000471DA21DBC01E Activation Lock Status: Disabled ********************************************************************** Source Disk Information Device Identifier: disk7s1 Device Node: /dev/disk7s1 Whole: No Part of Whole: disk7 Volume Name: Macintosh HD Mounted: No Partition Type: 41504653-0000-11AA-AA11-00306543ECAC File System Personality: APFS Type (Bundle): apfs Name (User Visible): APFS Owners: Disabled OS Can Be Installed: No Booter Disk: disk7s3 Recovery Disk: disk7s4 Media Type: Generic Protocol: Disk Image SMART Status: Not Supported Volume UUID: 8ED3C213-E76F-4003-BE27-D4EEC5CF17F0 Disk / Partition UUID: 8ED3C213-E76F-4003-BE27-D4EEC5CF17F0 Disk Size: 263.9 GB (263930732544 Bytes) (exactly 515489712 512-Byte-Units) Device Block Size: 4096 Bytes Volume Used Space: 9.9 GB (9896615936 Bytes) (exactly 19329328 512-Byte-Units) Container Total Space: 263.9 GB (263930732544 Bytes) (exactly 515489712 512-Byte-Units) Container Free Space: 241.1 GB (241116286976 Bytes) (exactly 470930248 512-Byte-Units) Media OS Use Only: No Media Read-Only: No Volume Read-Only: Not applicable (not mounted) Device Location: External Removable Media: Removable Media Removal: Software-Activated Solid State: Info not available This disk is an APFS Volume. APFS Information: APFS Container: disk7 APFS Physical Store: disk6s2 Fusion Drive: No APFS Volume Group: E53044FB-BEE1-439A-9720-377826409FEB Encrypted: No FileVault: No Sealed: Broken Locked: No ********************************************************************** Image information: Sparse Image Name: EFI01_FULL.sparseimage Sparse Image Start Time: Tue Dec 5 11:17:09 EST 2023 Sparse Image End Time..: Tue Dec 5 11:24:15 EST 2023 DMG Image Name: EFI01_FULL.dmg DMG Image Start Time: Tue Dec 5 11:24:17 EST 2023 DMG Image End Time..: Tue Dec 5 11:31:28 EST 2023 EFI01_FULL.dmg MD5 Hash: b6acf349e75bd1eff59b1af14abc7aea Hashing Start Time..: Tue Dec 5 11:31:28 EST 2023 Hashing End Time....: Tue Dec 5 11:33:42 EST 2023 ********************************************************************** Completion Information: Process completed on: Tue Dec 5 11:33:42 EST 2023 **********************************************************************