• AFF4
  • Documentation
  • GitHub
References Papers

  • Extending the Advanced Forensic Format to accommodate Multiple Data Sources, Logical Evidence, Arbitrary Information and Forensic Workflow.
  • Hash based disk imaging using AFF4: Cohen, Michael, and Bradley Schatz. digital investigation 7 (2010): S121-S128.
  • Refining evidence containers for Provenance and accurate data Representation: Schatz, Bradley, and Michael Cohen. Advances in Digital Forensics VI. Springer Berlin Heidelberg, 2010. 227-242.
Download