How to Implement AFF to EnCase or FTK

[kartika pertiwi]

Hello,

My name is Kartika Pertiwi. I'm student of National Crypto Institute
of Indonesia (NCI Indonesia). Now, i'm on my way to write thesis of
'Study of Implementing E-Signature for Securing Digital Evidence'.
I've read the article of "Providing Cryptographic and Evidentiary
Chain-of-Custody with the Advanced Forensic Format, Library, and
Tools" by Simson L. Garfinkel, Naval Postgraduate School and Harvard
University, USA.

I don't have special background of digital forensics. I only know the
basic proses of digital forensics. I need help, i need to know :
(1) can AFF be implemented to EnCase (or any other digital forensics
software) ?
(2) How to Implement AFF to EnCase (or any other digital forensics
software) ?

Thank you.

Best Regards,
Kartika Pertiwi

[SLG]

FTK supports AFF; EnCase does not. You can use the affmount command
and make an AFF drive appear as a raw drive and use it with EnCase
that way.

On Jun 5, 12:39 am, kartika pertiwi