The Evimetry Filesystem Bridge:  Making Your AFF4 Forensic Images Available

Cybrary
Course

In your data forensics, do you need to make AFF4 images available in tools that do not natively support that format? Check out this part of our series on using Evimetry for high-speed forensic acquisitions. You will use Evimetry Filesystem Bridge to access a previously acquired AFF4 image and also evaluate programs with built-in AFF4 support.

Time
19 minutes
Difficulty
Intermediate
4.7
Share
NEED TO TRAIN YOUR TEAM? LEARN MORE
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or

Already have an account? Sign In »

Course Description

If you’ve been following our series of courses on using Evimetry to perform high-speed, forensic acquisitions, you must have asked yourself “How do I use an AFF4 forensic image in my favorite forensic tool?”  The answer is the Evimetry Filesystem Bridge, which we use in this course to access a previously collected Evimetry AFF4 image in a forensic tool that doesn’t natively support the AFF4 forensic format. 

Prerequisites

  • Before any forensic acquisition you must document the evidence
  • See my Cybrary course: “Evidence Handling: Do it the Right Way”
  • See my Cybrary series of courses on forensic acquisition using Evimetry
  • Get a full featured, evaluation copy of Evimetry (Link found in Syllabus)
  • Internet connected computer
  • An “evidence” computer or drive
  • An AFF4 forensic image previously acquired using one of the Evimetry Methods
  • A storage drive (USB3 External)

Course Goals

By the end of this course, students should be able to:

  • Understand the Evimetry Filesystem Bridge
  • Use the Evimetry Bridge to Access a Previously Acquired AFF4 Forensic Image
  • Review Those Programs with Built-in AFF4 Support
Instructed By
Brian Dykstra
Brian Dykstra
CEO and President of Atlantic Data Forensics
Instructor
Provider
Atlantic Data Forensics

Industry leader in digital evidence collection and forensics.

Provider
Cybrary
Certificate of Completion
Certificate Of Completion

Complete this entire course to earn a The Evimetry Filesystem Bridge:  Making Your AFF4 Forensic Images Available Certificate of Completion