These advanced steps are primarily for system administrators and others who are familiar with the command line. You don't need a bootable installer to upgrade macOS or reinstall macOS, but it can be useful when you want to install on multiple computers without downloading the installer each time.

Scalpel options are described in the Scalpel man page, 'scalpel.1'. You may also execute Scalpel w/o any command line arguments to see a list of options. NOTE: Compilation is necessary on Unix platforms and on Mac OS X. For Windows platforms, a precompiled scalpel.exe is provided. Scalpel on MacOS Sierra November 23, 2016 / Lynsay / 0 Comments Recently, I’ve been exploring mobile forensics and I wanted to install Scalpel on my new Mac however, I encountered a few difficulties along the way.

What you need to create a bootable installer

A USB flash drive or other secondary volume formatted as Mac OS Extended, with at least 14GB of available storage
A downloaded installer for macOS Big Sur, Catalina, Mojave, High Sierra, or El Capitan

Download macOS

Download: macOS Big Sur, macOS Catalina, macOS Mojave, or macOS High Sierra
These download to your Applications folder as an app named Install macOS [version name]. If the installer opens after downloading, quit it without continuing installation. To get the correct installer, download from a Mac that is using macOS Sierra 10.12.5 or later, or El Capitan 10.11.6. Enterprise administrators, please download from Apple, not a locally hosted software-update server.
Download: OS X El Capitan
This downloads as a disk image named InstallMacOSX.dmg. On a Mac that is compatible with El Capitan, open the disk image and run the installer within, named InstallMacOSX.pkg. It installs an app named Install OS X El Capitan into your Applications folder. You will create the bootable installer from this app, not from the disk image or .pkg installer.

Use the 'createinstallmedia' command in Terminal

Connect the USB flash drive or other volume that you're using for the bootable installer.
Open Terminal, which is in the Utilities folder of your Applications folder.
Type or paste one of the following commands in Terminal. These assume that the installer is in your Applications folder, and MyVolume is the name of the USB flash drive or other volume you're using. If it has a different name, replace MyVolume in these commands with the name of your volume.

Big Sur:*

Catalina:*

Mojave:*

High Sierra:*

El Capitan:

* If your Mac is using macOS Sierra or earlier, include the --applicationpath argument and installer path, similar to the way this is done in the command for El Capitan.

After typing the command:

Press Return to enter the command.
When prompted, type your administrator password and press Return again. Terminal doesn't show any characters as you type your password.
When prompted, type Y to confirm that you want to erase the volume, then press Return. Terminal shows the progress as the volume is erased.
After the volume is erased, you may see an alert that Terminal would like to access files on a removable volume. Click OK to allow the copy to proceed.
When Terminal says that it's done, the volume will have the same name as the installer you downloaded, such as Install macOS Big Sur. You can now quit Terminal and eject the volume.

Use the bootable installer

Determine whether you're using a Mac with Apple silicon, then follow the appropriate steps:

Apple silicon

Plug the bootable installer into a Mac that is connected to the internet and compatible with the version of macOS you're installing.
Turn on your Mac and continue to hold the power button until you see the startup options window, which shows your bootable volumes.
Select the volume containing the bootable installer, then click Continue.
When the macOS installer opens, follow the onscreen instructions.

Intel processor

Plug the bootable installer into a Mac that is connected to the internet and compatible with the version of macOS you're installing.
Press and hold the Option (Alt) ⌥ key immediately after turning on or restarting your Mac.
Release the Option key when you see a dark screen showing your bootable volumes.
Select the volume containing the bootable installer. Then click the up arrow or press Return.
If you can't start up from the bootable installer, make sure that the External Boot setting in Startup Security Utility is set to allow booting from external media.
Choose your language, if prompted.
Select Install macOS (or Install OS X) from the Utilities window, then click Continue and follow the onscreen instructions.

Learn more

A bootable installer doesn't download macOS from the internet, but it does require an internet connection to get firmware and other information specific to the Mac model.

For information about the createinstallmedia command and the arguments you can use with it, make sure that the macOS installer is in your Applications folder, then enter the appropriate path in Terminal:

用於數位鑑識的檔案還原工具

1.Scalpel
可透過資料庫所提供的檔案特徵 ( header 、 footer ... ) 從映象檔或磁碟中復原檔案 ( FATx 、 NTFS 、 ext2/3 ... )。

Scalpel is a fast file carver that reads a database of header and footer definitions and extracts matching files from a set of image files or raw device files. Scalpel is filesystem-independent and will carve files from FATx, NTFS, ext2/3, or raw partitions. It is useful for both digital forensics investigation and file recovery. Scalpel resulted from a complete rewrite of foremost 0.69, a popular open source file carver, to enhance performance and decrease memory usage.

Notes on Platforms

Linux
The preferred platform for using Scalpel is Linux. Scalpel has small memory requirements and runs well even on machines with modest resources. For example, Scalpel will rapidly carve arbitrary-sized files on a Pentium 2 with 256MB, booting a 'live' Linux distribution such as Knoppix.

Windows
Scalpel will also compile under Win32 using mingw, provided you first install the pthreads library. If you'd like to try Scalpel on Win32 w/o the bother of compiling it yourself, an executable and pthreads DLL are included in the distribution--just untar and go. Note that under Windows, the pthreads DLL must be present in the same directory as the Scalpel executable. Carving physical and logical devices directly under Windows (e.g., using .physicaldrive0 as a target) is not supported in the current release.
Mac OS X
As of v1.53, Scalpel is supported on Mac OS X. Compile using 'make bsd'. As of v1.54, Scalpel supports 'live' carving of block devices under Mac OS X.
All platforms Mac

As of v1.54, Scalpel supports carving files larger than 4GB on all platforms.
As of v1.60, Scalpel supports preview carving and other new carving modes. See the distribution for details.

Scalpel

Downloads

Current version of Scalpel:
Scalpel 1.60 (Released 12/08/2006)
Previous versions of Scalpel:
Scalpel 1.54
Scalpel 1.53
Scalpel 1.52
Scalpel 1.51
MD5 hashes for Scalpel distributions:
a0ad1ae3f709bb42d30ba2dee992c3b0 *scalpel-1.60.tar.gz
5315f3e737437faf3cef7da55cde2d32 *scalpel-1.54.tar.gz
626df7149175b8a1a0b8380003dadf24 *scalpel-1.53.tar.gz
cb54d87d54a0fa4721d13ba4f6076491 *scalpel-1.52.tar.gz
8e64bf92085081e0367cf23718bb6126 *scalpel-1.51.tar.gz

Scalpel Mac Os X Install