AFF4 -The Advanced Forensics/digital evidence and data File Format.

AFF4 -The Advanced Forensics/digital evidence and data File Format.

The Advanced Forensics File Format 4 (AFF4) is an open source format used for the storage of digital evidence and data.

It was originally designed and published in [1] and has since been standardised as the AFF4 Standard v1.0, which is available at https://github.com/aff4/Standard . This project is a work in progress implementation, providing two library implementations, C/C++ and Python.

aff4

What is currently supported.

The focus of this implementation at present is reading images conforming with the AFF4 Standard v1.0. Canonical images are provided in the AFF4 Reference Images github project at https://github.com/aff4/ReferenceImages
+ Reading ZipFile style volumes.
+ Reading AFF4 Image streams using the deflate or snappy compressor.
+ Reading RDF metadata using Turtle (and in some instances YAML for backwards compatibility).

Build and install the AFF4 library:

Source: https://github.com/google