| Title: | Advanced Forensic Format: An Open, Extensible Format for Disk Imaging |
| Author: |
Stevens, Christopher; Malan, David; Garfinkel, Simson; Dubec, Karl-Alexander; Pham, Cecile
Note: Order does not necessarily reflect citation order of authors. |
| Citation: | Garfinkel, Simson L., David J. Malan, Karl-Alexander Dubec, Christopher C. Stevens, and Cecile Pham. 2006. Advanced forensic format: An open, extensible format for disk imaging. In Advances in Digital Forensics II: FIP International Conference on Digital Forensics, National Center for Forensic Science, Orlando, Florida, January 29-February 1, 2006, ed. Martin Olivier and Sujeet Shenoi, 17-31. New York: Springer. |
| Full Text & Related Files: |
Malan_AdvancedForensic.pdf (489.6Kb; PDF)
|
| Abstract: | This paper describes the Advanced Forensic Format (AFF), which is designed as an alternative to current proprietary disk image formats. AFF offers two significant benefits. First, it is more flexible because it allows extensive metadata to be stored with images. Second, AFF images consume less disk space than images in other formats (e.g., EnCase images). This paper also describes the Advanced Disk Imager (AImage),a new program for acquiring disk images that compares favorably with existing alternatives. |
| Other Sources: | http://www.springer.com/series/6102 |
| Terms of Use: | This article is made available under the terms and conditions applicable to Other Posted Material, as set forth at http://nrs.harvard.edu/urn-3:HUL.InstRepos:dash.current.terms-of-use#LAA |
| Citable link to this page: | http://nrs.harvard.edu/urn-3:HUL.InstRepos:2829932 |
Contact administrator regarding this item (to report mistakes or request changes)