This paper describes the Advanced Forensic Format (AFF), which is designed as an alternative to current proprietary disk image formats. AFF offers two significant benefits. First, it is more flexible because it allows extensive metadata to be stored with images. Second, AFF images consume less disk space than images in other formats (e.g., En-Case images). This paper also describes the Advanced Disk Imager, a new program for acquiring disk images that compares favorably with existing alternatives.
CITATION STYLE
Garfinkel, S., Malan, D., Dubec, K., Stevens, C., & Pham, C. (2006). Advanced forensic format: An open extensible format for disk imaging. IFIP International Federation for Information Processing. Springer New York. https://doi.org/10.1007/0-387-36891-4_2
Mendeley helps you to discover research relevant for your work.