libfvde Logo

libfvde

0
Free
Visit Website

libfvde is a library to access FileVault Drive Encryption (FVDE) (or FileVault2) encrypted volumes. It supports various Mac OS X versions and encryption volume types, including removable media volumes and system volumes. The library provides access to encrypted data on a storage media volume. The project is still experimental and has some unsupported Core Storage format features, such as multiple physical volumes. It also has some planned features, including Dokan support and partial encrypted volumes. libfvde is licensed under LGPLv3+ and has a wiki with documentation and building instructions.

FEATURES

ALTERNATIVES

Exiv2 is a C++ library and command-line utility for image metadata manipulation.

Collects and organizes Linux OS data for detailed analysis and incident response.

A Forensic Framework for Skype with various investigative options.

Tool for analyzing Windows Recycle Bin INFO2 file

Open Backup Extractor is an open source program for extracting data from iPhone and iPad backups.

GUI-based memory forensic capture tool for cyber forensics and cyber crime investigation.

Documentation project for Digital Forensics Artifact Repository

A tool for creating compact Linux memory dumps compatible with popular debugging tools.