Computer Forensics File Formats: Why you Should be Using AFF4
If you’re not using AFF4 (Advanced Forensics File Format v4) then your forensics process is stuck in the past. In this course we’ll be discussing the performance problems associated with the Expert Witness Format (E01/EX01) and raw or DD forensic images.
Already have an account? Sign In »
In preparation for the next series of Atlantic Data Forensics’ courses on using Evimetry for forensic collections, the viewer will become familiar with the AFF4 format and the significant speed, compression and documentation advantages AFF4 brings to the hard drive forensic imaging process. Learn to collect your case data like the experts. Come Run With Us.
Prerequisites
- Planning to collect data for evidence
- In a position where it might become necessary to collect digital evidence
Study Resources
- http://www.osdfcon.org/presentations/2016/Bradley_Schatz-AFF4.pdf
- https://www.aff4.org/index.html
- https://github.com/aff4/Standard
Course Goals
By the end of this course, students should be able to:
- Understand what AFF4 is
- Realize the problems associated with common forensic file formats
- Acknowledge the advantages of AFF4
- Recognize the tools using AFF4
Industry leader in digital evidence collection and forensics.
Complete this entire course to earn a Computer Forensics File Formats: Why you Should be Using AFF4 Certificate of Completion
Competency Areas
