Computer Forensics File Formats: Why you Should be Using AFF4

Course

In preparation for the next series of Atlantic Data Forensics’ courses on using Evimetry for forensic collections, the viewer will become familiar with the AFF4 format and the significant speed, compression and documentation advantages AFF4 brings to the hard drive forensic imaging process. Learn to collect your case data like the experts. Come Run With Us.

Prerequisites

• Planning to collect data for evidence
• In a position where it might become necessary to collect digital evidence

Study Resources

• http://www.osdfcon.org/presentations/2016/Bradley_Schatz-AFF4.pdf
• https://www.aff4.org/index.html
• https://github.com/aff4/Standard

Course Goals

By the end of this course, students should be able to:

• Understand what AFF4 is
• Realize the problems associated with common forensic file formats
• Acknowledge the advantages of AFF4
• Recognize the tools using AFF4