Verify for APFS snapshots and you’ll have the info in a format you possibly can mount and extract to a backup or again to the present filesystem.
- Boot to restoration OS
- Begin Disk Utility
- Within the View menu – present all units and present snapshots
- Mount your Information quantity
- Connect your exterior drive and mount it in Disk Utility
- Discover the earliest snapshot (or the one almost definitely to comprise the info earlier than deletion)
- Mount that snapshot
- Give up Disk Utility and begin Terminal.app
- All of the mounts will exist – copy the information from /Volumes/Information@snap-123456789 to /Volumes/external_drive
If you cannot discover a snapshot, you’ll have to run dd on non-synthesized disk – I get both Permission denied or Invalid argument after I try and have dd learn from any synthesized units.
bash-3.2# dd if=/dev/disk0s2 of=/Volumes/bmike/restoration/foo512.dd bs=1m depend=512
512+0 recordsin
512+0 recordsout
536870912 bytes transferred in 45.095041 secs (11905320 bytes/sec)
Until you possibly can convey a unique device compiled and that runs from an connected disk in restoration mode, you’re restricted by design to entry this “storage” off system.
Apple Safe Enclave and AES engine forestall exterior entry to the info saved on the interior storage. Any restoration software program must request the drive be unlocked and the info to be decrypted between the storage and the processor. In your plan to work, you’ll have to defeat the info safety {hardware} to get on the storage even in DFU mode.
