EECS Home

Forensics Home

Cross-Drive Forensics

AFF

Webscraping

Forensics Team

Advanced Forensics Format

In the fall of 2005, Garfinkel prdocued his paper, "AFF: A New Format for Storing Hard Drive Images" after the Forensics Team completed the article entitled, "Disk Imaging with the Advanced Forensics Format, Library and Tools." AFF is a program designed and implemented by Garfinkel to use for storing data imaged from recycled hard drives. Garfinkel also introduced his AIMAGE program, a disk image acquisitions program.

Papers


Garfinkel, S., "AFF: A New Format for Storing Hard Drive Iamges," Communications of the ACM, February, 2006.


Garfinkel, S., Malan, D., Dubec, K., Stevens, C, Pham, C., "Disk Imaging with the Advanced Forensics Format, Library and Tools," The Second Annual IFIP WG 11.9 International Conference on Digital Forensics, National Center for Forensic Science, Orlando, Florida, USA January 29 - February 1 2006.