libewf

libewf 是一个用于访问专家证人压缩格式（EWF）的库。 项目信息： 状态：实验性 许可证：LGPL-3.0-or-later 支持读写的 EWF 格式： SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 不支持： .Ex01 EWF2-Ex01 bzip2 压缩（正在进行中） .Ex01 EWF2-Ex01 加密 仅支持读取的 EWF 格式： 逻辑证据文件（Logical Evidence File，LEF） .L01 EWF-L01 .Lx01 EWF2-Lx01 其他特性： 空块压缩 使用增量（或影子）文件进行读写访问...

Velociraptor 0.7.2 Release: Digging Deeper than Ever with EWF Support, Dynamic DNS and More

By Dr. Mike Cohen and Carlos Canto Rapid7 is very excited to announce that version 0.7.2 of Velociraptor is now fully available for download. In this post we’ll discuss some of the interesting new features. EWF Support Velociraptor has introduced the ability to analyze dead disk images in the pas...

OSFClone - Open Source Utility To Create And Clone Forensic Disk Images

OSFClone is a free, self-booting solution which enables you to create or clone exact raw disk images quickly and independent of the installed operating system. In addition to raw disk images, OSFClone also supports imaging drives to the open Advance Forensics Format AFF , AFF is an open and...