Toggle navigation
AFF4
Documentation
GitHub
Documentation Portal
The below is a collection of documents useful for users of the AFF4 library.
Overview
Streams
File Based Streams
Segments
The AFF4 Image stream.
The AFF4 Map stream.
Volumes
The AFF4 ZipFile Volume
AFF4 Introduction and basic concepts.
Developers
Building a statically linked imager.
References
Papers
Extending the Advanced Forensic Format to accommodate Multiple Data Sources, Logical Evidence, Arbitrary Information and Forensic Workflow.
Hash based disk imaging using AFF4: Cohen, Michael, and Bradley Schatz. digital investigation 7 (2010): S121-S128.
Refining evidence containers for Provenance and accurate data Representation: Schatz, Bradley, and Michael Cohen. Advances in Digital Forensics VI. Springer Berlin Heidelberg, 2010. 227-242.
Manual