Skip to main content
This is a pre-production deployment of Warehouse. Changes made here affect the production instance of PyPI (pypi.python.org).
Help us improve Python packaging - Donate today!

Python Advanced Forensic Format Version 4 library.

Project Description

# AFF4 -The Advanced Forensics File Format

The Advanced Forensics File Format 4 (AFF4) is an open source format used for the storage of digital evidence and data.

It was originally designed and published in [1] and has since been standardised as the AFF4 Standard v1.0, which is available at https://github.com/aff4/Standard . This project is a work in progress implementation, providing two library implementations, C/C++ and Python.

## What is currently supported.

The focus of this implementation at present is reading images conforming with the AFF4 Standard v1.0. Canonical images are provided in the AFF4 Reference Images github project at https://github.com/aff4/ReferenceImages

  1. Reading ZipFile style volumes.
  2. Reading AFF4 Image streams using the deflate or snappy compressor.
  3. Reading RDF metadata using Turtle (and in some instances YAML for backwards compatibility).

## What is not yet supported.

The write support in the libraries is currently broken and being worked on. Other aspects of the AFF4 that have not yet been implemented in this codebase include:

  1. Encrypted AFF4 volumes.
  2. Persistent data store.
  3. HTTP backed streams.
  4. Splitting an AFF4 Image across multiple volumes.
  5. Map streams.
  6. Support for signed statements or Bill of Materials.
  7. Logical file acquisition.

# Notice

This is not an official Google product (experimental or otherwise), it is just code that happens to be owned by Google.

# References [1] “Extending the advanced forensic format to accommodate multiple data sources, logical evidence, arbitrary information and forensic workflow” M.I. Cohen, Simson Garfinkel and Bradley Schatz, digital investigation 6 (2009) S57–S68.

Release History

Release History

This version
History Node

0.26.post5

History Node

0.26.post4

History Node

0.26.post3

History Node

0.26.post2

History Node

0.26.post1

History Node

0.26

History Node

0.24.post3

History Node

0.24.post2

History Node

0.24.post1

History Node

0.24

History Node

0.23

History Node

0.22

History Node

0.21

History Node

0.20

History Node

0.19

History Node

0.18

History Node

0.17

History Node

0.16

Download Files

Download Files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

File Name & Checksum SHA256 Checksum Help Version File Type Upload Date
pyaff4-0.26.post5.zip (75.9 kB) Copy SHA256 Checksum SHA256 Source Nov 6, 2017

Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting