AFFLIB

aimage-3.2.5 released

Although I previously stated aimage was withdrawn from support, I have continued to receive requests for support. As the final version of aimage did not compile with the current version of AFFLIB, I have updated aimage so that now it does.

aimage is still not supported, but version 3.2.5 has been released.

2 Comments August 17, 2011

Reminder: AFFLIB no longer supports EWF

There has been some confusion regarding the lack of support for the EnCase/Expert Witness “.E01″ format in AFFLIB 3.6.3.

As AFFLIB is most frequently used with SleuthKit, and given that SleuthKit directly supports LIBEWF, the decision was made to make AFFLIB simpler and reduce dependencies by removing direct support for LIBEWF.  This means that you can no longer use affuse to mount an E01 file; you now need to use mount_ewf which is distributed from the libewf website.

Removing this functionality actually makes AFFLIB easier to work with, as it removes a dependency which caused problems for some people.

Leave a Comment October 14, 2010

AFFLIB 3.6.3 released

AFFLIB 3.6.3 has been released. This is a bug-fix release that fixes a bug in the handling of split-raw files that was introduced with AFFLIB 3.6.0. All users are encouraged to upgrade.

Leave a Comment October 9, 2010

AFFLIB 3.6.0 released

AFFLIB 3.6.0 is released. Key features include:

• Name change: All commands now being “aff” instead of “af”. This is a result of the name conflict under MacOS 10.6. (Apple created a new command “afconvert” which was causing lots of confusion.
• Bug fix: encrypted AFD files works again.
• Bug fix: files >4GB work on Win32.

Leave a Comment July 25, 2010

AFFLIB 3.5.10 Released

I am happy to announce the release of AFFLIB 3.5.10. Key features in this new release include:

• afcrypto now has a -d option to decrypt an encrypted AFF file in place. (The debug option has been renamed -D).
• AFFLIB now cross-compiles under mingw, allowing you to produce Windows executables from a Mac or Linux system. Because of the mingw support, the Microsoft VC++ support has been deprecated. (Nobody was using it anyway.)

We are still working to get LIBEWF to cross-compile with mingw. Stand by…

Leave a Comment April 22, 2010