The Advanced Forensics File Format 4 (AFF4) is an open source format used for the storage of digital evidence and data. This project implements a C/C++ library for creating, reading and manipulating AFF4 images, and includes the canonical aff4imager binary which provides a general purpose standalone imaging tool. The library and binary are known to work on Linux, Windows, and OSX. It supports reading and writing ZipFile style volumes, Directory style volumes, and AFF4 Image streams using deflate or snappy compressor. It also supports multi-threaded imaging for efficient utilization on multi-core systems. However, it does not currently implement Section 6. Hashing of the standard, including verifying or generating linear or block hashes.
Common questions about c-aff4 including features, pricing, alternatives, and user reviews.
c-aff4 is An open source format for storing digital evidence and data, with a C/C++ library for creating, reading, and manipulating AFF4 images. It is a Security Operations solution designed to help security teams with File Analysis.
c-aff4 is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/Velocidex/c-aff4/ for download and installation instructions.
Popular alternatives to c-aff4 include:
Compare these tools and more at https://cybersectools.com/categories/security-operations
c-aff4 is for security teams and organizations that need File Analysis. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Malware scanning tool for DFIR using 40+ engines from ReversingLabs
Malware analysis platform for SOC teams with binary analysis and threat detection
Incident investigation tool for info risks, user activity, and file exposure.
Email forensics tool for analyzing MIME header fields across 20+ formats.
FIM and config change monitoring tool with baseline deviation detection.