If you manage a computer lab or a fleet of shared iPads/Macs with M1 chips, you can use the pkg new command weekly. Distribute the new package to all lab machines. Every night, a script runs restoretools restore --from-snapshot to wipe any student changes and revert to the clean lab state.
A regional bank’s incident response team used restoretools pkg new to rapidly package a compromised web server’s binaries after a breach. By including --include-deps and --hash-algo sha512 , they preserved an immutable evidence package that withstood legal scrutiny. Later, the same package allowed them to restore a clean environment to a forensic lab for further analysis. restoretools pkg new
is a software package historically seeded to Apple employees. It includes a suite of specialized applications for testing and restoring iOS devices, such as: If you manage a computer lab or a
, you are typically interacting with Apple's internal suite of device maintenance tools. This package includes utilities like PurpleRestore PurpleSNIFF used by Apple engineers to diagnose and restore iDevices. The Apple Wiki Core Components for Creating a "Piece" A regional bank’s incident response team used restoretools
The pkg module within RestoreTools is the heart of package handling. It supports three primary operations: