GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → Velocidex → C Aff4

Velocidex / C Aff4

Licence: apache-2.0
An AFF4 C++ implementation.

Labels

forensicsdigital-forensics

Projects that are alternatives of or similar to C Aff4

Forensic Tools
A collection of tools for forensic analysis
Stars: ✭ 204 (+61.9%)
Mutual labels:  forensics, digital-forensics
Awesome Forensicstools
Awesome list of digital forensic tools
Stars: ✭ 120 (-4.76%)
Mutual labels:  forensics, digital-forensics
Linuxforensics
Everything related to Linux Forensics
Stars: ✭ 189 (+50%)
Mutual labels:  forensics, digital-forensics
INDXRipper
Carve file metadata from NTFS index ($I30) attributes
Stars: ✭ 32 (-74.6%)
Mutual labels:  forensics, digital-forensics
ForensicsTools
A list of free and open forensics analysis tools and other resources
Stars: ✭ 392 (+211.11%)
Mutual labels:  forensics, digital-forensics
Memlabs
Educational, CTF-styled labs for individuals interested in Memory Forensics
Stars: ✭ 696 (+452.38%)
Mutual labels:  forensics, digital-forensics
pyaff4
The Python implementation of the AFF4 standard.
Stars: ✭ 37 (-70.63%)
Mutual labels:  forensics, digital-forensics
Tcpflow
TCP/IP packet demultiplexer. Download from:
Stars: ✭ 1,231 (+876.98%)
Mutual labels:  forensics, digital-forensics
Mr
Mobile Revelator
Stars: ✭ 69 (-45.24%)
Mutual labels:  forensics
Rifiuti2
Windows Recycle Bin analyser
Stars: ✭ 100 (-20.63%)
Mutual labels:  forensics
Icpr2020dfdc
Video Face Manipulation Detection Through Ensemble of CNNs
Stars: ✭ 64 (-49.21%)
Mutual labels:  forensics
Autopsy
Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
Stars: ✭ 1,183 (+838.89%)
Mutual labels:  forensics
Awesome Forensics
A curated list of awesome forensic analysis tools and resources
Stars: ✭ 1,775 (+1308.73%)
Mutual labels:  digital-forensics
Etl Parser
Event Trace Log file parser in pure Python
Stars: ✭ 66 (-47.62%)
Mutual labels:  forensics
Invoke Liveresponse
Invoke-LiveResponse
Stars: ✭ 115 (-8.73%)
Mutual labels:  forensics
Metaforge
An OSINT Metadata analyzing tool that filters through tags and creates reports
Stars: ✭ 63 (-50%)
Mutual labels:  forensics
Dfw1n Osint
Australian Open Source Intelligence Gathering Resources, Australias Largest Open Source Intelligence Repository for Cyber Professionals and Ethical Hackers
Stars: ✭ 63 (-50%)
Mutual labels:  forensics
Timesketch
Collaborative forensic timeline analysis
Stars: ✭ 1,795 (+1324.6%)
Mutual labels:  forensics
Awesome Hacking
Awesome hacking is an awesome collection of hacking tools.
Stars: ✭ 1,802 (+1330.16%)
Mutual labels:  forensics
Kobackupdec
Huawei backup decryptor
Stars: ✭ 94 (-25.4%)
Mutual labels:  digital-forensics
View All Similar Projects ➔

AFF4 -The Advanced Forensics File Format

The Advanced Forensics File Format 4 (AFF4) is an open source format used for the storage of digital evidence and data.

The standard is currently maintained here: https://github.com/aff4/Standard

Reference Images are found: https://github.com/aff4/ReferenceImages

This project implementats a C/C++ library for creating, reading and manipulating AFF4 images. The project also includes the canonical aff4imager binary which provides a general purpose standalone imaging tool.

The library and binary are known to work on Linux (all versions since Ubuntu 10.04), Windows (All versions) and OSX (All known versions).

What is currently supported.

Currently this library supports most of the features described in the standard https://github.com/aff4/Standard.

  1. Reading and Writing ZipFile style volumes

    a. Supports splitting of output volumes into volume groups (e.g. splitting at 1GB volumes).

  2. Reading ahd Writing Directory style volumes.

  3. Reading and Writing AFF4 Image streams using the deflate or snappy compressor.

  4. Reading RDF metadata using Turtle.

  5. Multi-threaded imaging for efficient utilization on multi core systems.

What is not yet supported.

This implementation currently does not implement Section 6. Hashing of the standard. This includes verifying or generating linear or block hashes.

Copyright

Copyright 2015-2017 Google Inc. Copyright 2018-present Velocidex Innovations.

References

[1] "Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow" M.I. Cohen, Simson Garfinkel and Bradley Schatz, digital investigation 6 (2009) S57–S68.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].