Monday, June 1, 2020

mac_apt recover notes


https://github.com/ydkhatri/mac_apt/wiki/Installation-for-Python3.7

https://github.com/ydkhatri/mac_apt/wiki/NOTES

  /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install.sh)"
     sudo chown -R $(whoami) /usr/local/bin /usr/local/lib /usr/local/sbin
     chmod u+w /usr/local/bin /usr/local/lib /usr/local/sbin
     brew install python3 git
    sudo pip3 install --upgrade virtualenv
   git clone --recursive https://github.com/ydkhatri/pylzfse
    cd pylzfse
    python setup.py build
    python setup.py install
    pip3 install pytsk3==20170802 libvmdk-python==20181227

   tar xfz ./libewf-20140808.tar.gz
   cd libewf-20140808
   python setup.py build
   python setup.py install
   pip install biplist construct==2.9.45 xlsxwriter plistutils kaitaistruct lz4 pycryptodome cryptography pybindgen==0.21.0 pillow
   cd ..
   sudo pip3 install pyaff4-0.31-yk.zip
   git clone https://github.com/libyal/libewf-legacy/
   cd libewf-20140808
   python3 setup.py build
   sudo python3 setup.py install
   cd
   cd mac_apt/
   source env/bin/activate

 python ./mac_apt.py  -x -o  output   E01  /Users/jianw/Library/Containers/com.apple.Notes/Data/Library/Notes/NotesV7.storedata   NOTES

python ./mac_apt.py  -x  -o output E01  "/Users/jianw/Library/Group\ Containers/group.com.apple.notes/NoteStore.sqlite"   NOTES