With new hashing library

This is the first release for 2 years! The major addition is the use of the HashLib4Pascal library in place of the default hashing library. This fantastic library is both better than the previous library (it's actively maintained and written very well) and will allow me to add SHA256, SHA512 and xxCode in the next few weeks. For this initial release I wanted to leave the existing hash types just to make sure the new library is incorporated properly.

Windows screenshot below showing YAFFI imaging a USB drive in Windows:

And below is the image open in X-Ways Forensics to show YAFFI does indeed create valid E01 images:

Also added Disk Wiping which is odd for an imager, but so many people keep asking of a "simple way to make disk ready for re-use". This is it. Right click a logical volume (Windows version) and choose Wipe Disk from the 'Dragons Layer' submenu and it will zero that partition. The partition itself will remain, allbeit as an useable 'RAW' type, but the rest of it will be zero. Then just use disk manager to reformat.

The disk wiping function is not quite ready for Linux, although I am not far off. I just need to work out how to get write access to a logically mounted volume. Maybe it is not possible. Aside from that, it will work in Linux as it does in Windows. Just be sure to run it as root to ensure YAFFI can image the drives. Screenshot below shows it on Linux Mint.

Sector Size lookups for GPT Disks

The new GPT parsing facility that was made available when right clicking a disk was originally hard coded to expect a sector size of 512 bytes, but with some disks, increasingly, the sector size can be bigger, such as 2Kb or 4Kb. This pre-release test version should in theory detect the sector size and the functions are then adjusted accordingly.

I don't have a disk with such large sector sizes so testing is appreciated by anyone who does.

This is for the Windows version only, because technical disk specification are called via Linux itself on the Linux version. Nevertheless, other minor improvements have been incorporated into this pre-release, so Linux version supplied too.

YAFFI now with full GPT Partition Traversal

This latest pre-release for Windows includes weeks of work (because I'm not especially talented!!) implementing a bespoke class for parsing GPT partition tables. The Windows API includes some of this functionality but for YAFFI, we need full control and I have more plans for some of the data extracted in future.

Why is this important? Many systems that create GPT partitions have unique GUIDs assigned to them, so it's possible to determine just from the GUID what created the partitioning scheme. YAFFI looks up about 80 of these systems and, at the time of writing, is the only utility I know of that can do this. So a new class (uGPT) contains a series of functions built from scratch that parse the tables byte-by-byte and as well as rendering the data it looks up the creator label.

Some other minor improvements over the previous release too. I'll compile a Linux version soon...

Windows YAFFI : Now with text and Hex searches!

Ever had a batch of devices to image and wanted to know which images to start on first? Well now with YAFFI comes the ability for the user to conduct a search WHILST imaging (a world first?). Text, Unicode (with or without case sensitivity) and hex patterns up to 8 bytes (with hex length of any size coming soon) are now supported. The results are saved to a log file in the root of the image folder.

Note the usual caveats with compound files like PDF, XLS etc - this is merely a raw search as found on disk, so will not include results that are only "visible" decoded.

Very much a test version - tested with a limited number of searches and only small disks and very much new territory for me so feedback, benchmark speed tests and advice welcome.

Linux version coming soon...

32-bit Linux Version

This version is the same as the previous Linux version except both YAFFI itself and the zlib and libewf libraries have been compiled for 32-bit Linux distributions. Tested on a live boot CD instance of Linux Mint 17. Worked perfectly.

Still just a test release officially.

Second Linux Pre-Release

A few changes, fixes and improvements of the Linux version...and also a non-debug version, meaning the binary is only a few Mb instead of nearly 20Mb

0.4 Beta Windows Release

Many of the fixes applied to Linux version. The code used to compile this version is the same as the second Linux pre-release, cross compiled for both platforms. Also a much smaller exe due to non-debug version.

First Linux Pre-Release

After several weeks, the v0.2 Beta Windows version has been cross-platformed for compilation on both Linux and Windows as v0.3-Beta (as many bugs were fixed in both Windows and Linux). Here is a quick peak and barely tested 64 bit version of the Linux version of YAFFI. Compiles and most functionality seems to work in my limited tests.

YAFFI - Second Beta Test Release

This version of YAFFI for Windows contains some polish to the progress display, log file output and strips away some needless code calls. Still experimental - not for evidential use.

YAFFI - First Test Release

Proud to announce the first test release of YAFFI for Windows. Linux version still in the making. There several minor interface issues I know of that need fixing but for now I thought I'd get a test version out.