libewf (libYAL Expert Witness Compression library)
libewf allows you to read media information of EWF
files in the SMART (EWF-S01) format and the EnCase (EWF-E01) format.
libewf allows reading files created by EnCase 1 to 6, linen and FTK
Imager.
Read or write supported EWF formats:
- SMART .s01 (EWF-S01)
- EnCase .E01 (EWF-E01)
Not supported:
- .Ex01 (EWF2-Ex01) bzip2 compression (work in progress)
- .Ex01 (EWF2-Ex01) encryption
Read-only supported EWF formats:
Logical Evidence File (LEF) .L01 (EWF-L01) and .Lx01 (EWF2-Lx01)
Other features:
- empty-block compression
- read/write access using delta (or shadow) files
- write resume
230c7d9ebb