Skip to content

📼 An Advanced Forensics File Format (AFF4) io/fs file system

License

Notifications You must be signed in to change notification settings

forensicanalysis/goaff4

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

17 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

goaff4

doc

Read forensic disk images in the Advanced Forensics File Format (AFF4) as io/fs.FS.

Example

func main() {
	f, _ := os.Open("Base-Linear.aff4")
	info, _ := f.Stat()

	// init file system
	aff4, _ := goaff4.New(f, info.Size())

	// read root directory
	infos, _ := fs.ReadDir(aff4, ".")

	// print files
	for _, info := range infos {
		fmt.Println(info.Name())
	}
}

About

📼 An Advanced Forensics File Format (AFF4) io/fs file system

Topics

Resources

License

Stars

Watchers

Forks

Languages