I recently put up a post on using hdiutil to create disk images in Mac OS X. To take that a step further let’s look at leverage a shadow mount. A shadow mount allows you to mount a read only file system (from a dmg) as a read-write structure without altering the original image, similar to how NetBoot works. This is useful for a variety of instances, most of all, forensically. To mount an image is going to be similar to how we did so previously, simply use the It is possible the volume was dismounted dirty and Mac OS X needs to do a consistency check on the file…