I’m trying to capture a forensic image of a USB stick using Linux dd on my Macbook. I’m having trouble turning on write blocking to the USB stick before taking the image. In Windows you use a registry tweak to prevent writing on the USB stick- how do you do this on Mac (without spending money for a DLP solution)?
Is this still valid to achieve that effect on MacOS, or did an update nullify it:
sudo kextunload /System/Library/Extensions/IOUSBMassStorageClass.kext