diskutil list got me:
and this is the hexdump:
I might fall asleep but if I do, I'll be back on tomorrow.
Code:
Andre-Bulatovs-MacBook-Pro:~ andrebulatov$ diskutil list
/dev/disk0
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme *500.1 GB disk0
1: EFI 209.7 MB disk0s1
2: Apple_HFS Macintosh HD 388.5 GB disk0s2
3: Apple_Boot Recovery HD 700.0 MB disk0s3
4: Microsoft Basic Data 50.2 GB disk0s4
and this is the hexdump:
Code:
Andre-Bulatovs-MacBook-Pro:~ andrebulatov$ sudo dd if=/dev/rdisk0 of=~/ntfsguess2_4s.bin skip=782726216 count=262144
Password:
262144+0 records in
262144+0 records out
134217728 bytes transferred in 61.374466 secs (2186866 bytes/sec)
Andre-Bulatovs-MacBook-Pro:~ andrebulatov$ hexdump -C ~/ntfsguess2_4s.bin | grep "eb 52 90 4e 54 46 53 20"
Andre-Bulatovs-MacBook-Pro:~ andrebulatov$
I might fall asleep but if I do, I'll be back on tomorrow.