[go: nahoru, domu]

Skip to content

blschatz/pyaff4-bls

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

AFF4 -The Advanced Forensics File Format

The Advanced Forensics File format 4 was originally designed and published in "Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow" M.I. Cohen, Simson Garfinkel and Bradley Schatz, digital investigation 6 (2009) S57–S68.

The format is an open source format used for the storage of digital evidence and data.

The original paper was released with an earlier implementation written in python. This project is a complete open source re-implementation for a general purpose AFF4 library.

What is currently supported.

  1. Reading ZipFile style volumes.
  2. Reading striped ZipFile volumes.
  3. Reading AFF4 Image streams using the deflate or snappy compressor.
  4. Reading RDF metadata using both YAML and Turtle.
  5. Verification of linear and block hashed images.
  6. Writing ZipFile style volumes.

What is in progress

  1. Logical file acquisition.

What is not yet supported:

  1. Encrypted AFF4 volumes.
  2. Persistent data store.
  3. HTTP backed streams.
  4. Support for signed statements or Bill of Materials.

Notice

This is not an official Google product (experimental or otherwise), it is just code that happens to be owned by Google and Schatz Forensic.

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages