25 lines
1.3 KiB
Text
25 lines
1.3 KiB
Text
The Advanced Forensic Format --- AFF(tm) --- is an extensible open
|
|
format for the storage of disk images and related forensic
|
|
information.
|
|
|
|
- Open format, free from any patent or license restriction.
|
|
Can be used with both open-source and proprietary forensic tools.
|
|
- Extensible. Any amount of metadata can be encoded in AFF files in the
|
|
format of name/value pairs.
|
|
- Efficient. AFF supports both compression and seeking within
|
|
compressed files.
|
|
- Open Source C/C++ Implementation. A freely redistributable C/C++
|
|
implementation including the AFF Library and basic conversion tools
|
|
is available for download. AFFLIB(tm) is being distributed under the BSD
|
|
license, allowing it to be incorporated in free and proprietary
|
|
programs without the need to pay license fees.
|
|
- Byte-order independent. AFFLib has been tested on both Intel and
|
|
PowerPC-based systems. Images created on one platform can be read on
|
|
another.
|
|
- Automatic calculation and storage of MD5 and SHA-1 hash codes,
|
|
allowing AFF files to be automatically validated after they are
|
|
copied to check for accidentally corruption.
|
|
- Explicit identification of sectors that could not be read from the
|
|
original disk.
|
|
- Planned support for digital signatures and direct authoring of AFF
|
|
files using dd_recover.
|