AFFLIB
AFFLIB is an open source implementation of AFF written in C.
AFFLIB includes:
- Library source code
- LZMA compression source code
- AFF Tools for disk image manipulation
- GNU autoconf build system
- WIN32 build system
- ZLIB, for compiling on windows
Programs written using the AFFLIB af_open(), af_seek(), af_read() and af_close() library primitives can read and write forensic disk images in any of the following formats:
- AFF (a single file with disk image data and metadata)
- AFD (a directory of AFF files)
- AFM (one or more raw files with disk image data, and an accompanying AFF file with metadata)
- Raw (one file for the disk image)
- Split Raw (multiple files for the disk image)
- EnCase (using libewf)
- Amazon S3 (Amazon’s Simple Storage Service used to store disk image and metadata)
- VMDK (VMWare’s Disk Image Format)
- DMG (Apple’s Disk Image Format)