Apple File System (APFS) forensic library — from-scratch pure-Rust reader (apfs-core) + anomaly analyzer (apfs-forensic) for container, volume, snapshot, encryption and sealed-volume structures. Panic-free, no runtime deps. Design + scaffold; implementation in progress.
macos rust incident-response forensics dfir file-system digital-forensics apfs filesystem-forensics apple-file-system
-
Updated
Jun 28, 2026 - Rust