https://github.com/sydp/goewf

Access Expert Witness Format (ewf/E01/L01) files using Golang
https://github.com/sydp/goewf

computer-forensics dfir digital-forensics evidence golang

Last synced: 7 days ago
JSON representation

Access Expert Witness Format (ewf/E01/L01) files using Golang

• Host: GitHub
• URL: https://github.com/sydp/goewf
• Owner: sydp
• License: mit
• Created: 2017-12-07T13:09:20.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2019-03-25T11:59:01.000Z (over 5 years ago)
• Last Synced: 2024-06-20T14:20:32.334Z (5 months ago)
• Topics: computer-forensics, dfir, digital-forensics, evidence, golang
• Language: Go
• Homepage:
• Size: 8.79 KB
• Stars: 8
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# goewf

goewf is a golang binding for the libewf project.  Read access support only.  No warranty offerred or implied, please validate if using in an evidentiary context.

# Build for ubuntu

## Install Go

```

sudo add-apt-repository ppa:gophers/archive

sudo apt-get update

sudo apt-get install golang-1.10-go

```

## Clone, build libewf, run sample

```

sudo apt install autoconf automake autopoint libtool pkg-config bison flex

go get -u github.com/sydp/goewf

cd libewf/

./synclibs.sh

./autogen.sh

./configure

./make

go build -o goewf cmd/goewf/main.go

# Read the first 512 bytes from image.E01

goewf image.E01 512

```