https://github.com/libyal/libewf
Libewf is a library to access the Expert Witness Compression Format (EWF)
https://github.com/libyal/libewf
Last synced: about 1 month ago
JSON representation
Libewf is a library to access the Expert Witness Compression Format (EWF)
- Host: GitHub
- URL: https://github.com/libyal/libewf
- Owner: libyal
- License: lgpl-3.0
- Created: 2014-10-02T21:10:50.000Z (over 10 years ago)
- Default Branch: main
- Last Pushed: 2024-05-20T10:57:34.000Z (11 months ago)
- Last Synced: 2024-05-21T10:55:20.636Z (11 months ago)
- Language: C
- Size: 46.6 MB
- Stars: 245
- Watchers: 35
- Forks: 75
- Open Issues: 20
-
Metadata Files:
- Readme: README
- Changelog: ChangeLog
- License: COPYING
- Authors: AUTHORS
Awesome Lists containing this project
- ForensicsTools - libewf - Libewf is a library and some tools to access the Expert Witness Compression Format (EWF, E01) (Challenges / Disk image handling)
README
libewf is a library to access the Expert Witness Compression Format (EWF).
Project information:
* Status: experimental
* Licence: LGPLv3+Read or write supported EWF formats:
* SMART .s01 (EWF-S01)
* EnCase
* .E01 (EWF-E01)
* .Ex01 (EWF2-Ex01)Not supported:
* .Ex01 (EWF2-Ex01) bzip2 compression (work in progress)
* .Ex01 (EWF2-Ex01) encryptionRead-only supported EWF formats:
* Logical Evidence File (LEF)
* .L01 (EWF-L01)
* .Lx01 (EWF2-Lx01)Other features:
* empty-block compression
* read/write access using delta (or shadow) files
* write resumeWork in progress:
* Dokan library support (experimental)
* Python bindings (including Python 3 support)
* write EWF2-Ex01 support
* Multi-threading supportPlanned:
* write EWF-L01 and EWF2-Lx01 (long-term)
The libewf package contains the following tools:
* ewfacquire; which writes storage media data from devices and files to EWF files.
* ewfacquirestream; which writes data from stdin to EWF files.
* ewfdebug; experimental tool does nothing at the moment.
* ewfexport; which exports storage media data in EWF files to (split) RAW format or a specific version of EWF files.
* ewfinfo; which shows the metadata in EWF files.
* ewfmount; which FUSE mounts EWF files.
* ewfrecover; special variant of ewfexport to create a new set of EWF files from a corrupt set.
* ewfverify; which verifies the storage media data in EWF files.For previous project contributions see:
* libewf on SourceForge: https://sourceforge.net/projects/libewf
For previous stable releases see:
* Downloads: https://github.com/libyal/legacy/tree/master/libewf
For more information see:
* Project documentation: https://github.com/libyal/libewf/wiki/Home
* How to build from source: https://github.com/libyal/libewf/wiki/Building