Publications
AFF Publications
You will find information about the AFF format in these publications:
- Garfinkel, S., “AFF: A New Format for Storing Hard Drive Images,” Communications of the ACM, February, 2006.
- The Common Evidence Format Working Group (Carrier, B., Casey, E., Garfinkel, S., Kornblum, J., Hosmer, C., Rogers., M., and Turner., P.,)“Standardizing Digital Evidence Storage,” Communications of the ACM, February, 2006.
- Garfinkel, S., Providing Cryptographic Security and Evidentiary Chain-of-Custody with the Advanced Forensic Format, Library, and Tools, The International Journal of Digital Crime and Forensics, Volume 1, Issue 1, January-March 2009.
- M. I. Cohen, Simson Garfinkel and Bradley Schatz, Extending the Advanced Forensic Format to accommodate Multiple Data Sources, Logical Evidence, Arbitrary Information and Forensic Workflow, DFRWS 2009, Montreal, Canada.
Other Publications
You will find these publications useful for understanding the other software on this website:
- Garfinkel, S., and Migletz, J., New XML-Based Files: Implications for Forensics, IEEE Security & Privacy Magazine, March/April 2009 (Vol. 7, No. 2)
- Garfinkel, Simson., Automating Disk Forensic Processing with SleuthKit, XML and Python, Systematic Approaches to Digital Forensics Engineering (IEEE/SADFE 2009), Oakland, California.
- Farrell, P., Garfinkel, S., White, D. Practical Applications of Bloom filters to the NIST RDS and hard drive triage, Annual Computer Security Applications Conference 2008, Anaheim, California, December 2008. )
Data Sources
You will find disk images in AFF format at http://digitalcorpora.org/