Advanced Forensic Format

from Wikipedia, the free encyclopedia

The Advanced Forensic Format (AFF) is a specification for a file format and the associated software in computer forensics .

The software released under a modified BSD license creates an image of any data carrier and compresses it. AFF makes it possible to read files in the compressed image, a functionality that is not possible with common packers such as gzip .

The AFF file consists of any number of segments, made up of a header, data payload and footer. One segment is always the created image; meta information such as explanations and additions to the forensic project can be stored in the other.

The AFF software package can be used in the form of a program library in all POSIX systems and can transparently mount the image files as data carriers . AFF uses the compression library zlib and the OpenSSL libraries for creating hash values .

Web links