2014-12-16 12:33:53 +01:00
|
|
|
libewf (libYAL Expert Witness Compression library)
|
|
|
|
|
|
|
|
|
|
libewf allows you to read media information of EWF
|
2010-05-11 22:54:05 +02:00
|
|
|
files in the SMART (EWF-S01) format and the EnCase (EWF-E01) format.
|
2010-05-12 17:41:10 +02:00
|
|
|
libewf allows reading files created by EnCase 1 to 6, linen and FTK
|
|
|
|
|
Imager.
|
2013-03-12 00:29:52 +01:00
|
|
|
|
|
|
|
|
Read or write supported EWF formats:
|
|
|
|
|
|
|
|
|
|
- SMART .s01 (EWF-S01)
|
|
|
|
|
- EnCase .E01 (EWF-E01)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Not supported:
|
|
|
|
|
|
|
|
|
|
- .Ex01 (EWF2-Ex01) bzip2 compression (work in progress)
|
|
|
|
|
- .Ex01 (EWF2-Ex01) encryption
|
|
|
|
|
|
|
|
|
|
Read-only supported EWF formats:
|
|
|
|
|
|
|
|
|
|
Logical Evidence File (LEF) .L01 (EWF-L01) and .Lx01 (EWF2-Lx01)
|
|
|
|
|
|
|
|
|
|
Other features:
|
|
|
|
|
|
|
|
|
|
- empty-block compression
|
|
|
|
|
- read/write access using delta (or shadow) files
|
|
|
|
|
- write resume
|
