AFFlib-tools Forensics tools of kali linux

Eazy_web
2 min readMay 28, 2024

--

AFF is an open and extensible file format to store disk images and associated metadata. It is useful in several scenarios, as computer forensics investigations.

AFFlib use to convert , hash checksum and verify the disk images of RAW image ,iso and lot

Afflib Convert :

its help analysis the DFI much informative as to detect the malicious activity

affconvert [ file to convert]
ez
affconvert backup.raw

Conver to Raw image

its help to change the aff file format to the raw image

  affconvert -r [file to aff]
ez
affconvert -r backup.aff

Convert to img file type

to change the aff file to image use this comment to get change the file type

affconvert -e img [file of aff]
ez
affconvert -e img backup.aff

AFF File Meta Data

its the most use way to analysis the disk image with the metadate

 affinfo [file of aff]
ez
affinfo backup.aff

to AFFverify

to verify the disk image as CRT file with the metadata and other can verify my it use man comment to get the more details of it

affverify [file of aff]

to stats

check the stats of the disk image by the way of the add and remove of the file in the disk image

affstats [file of aff]

for more details about this tools given in man of the kali linux and github page to access the man in kali linux use comment of

man affinfo
man affconvert
man verify
man stats
...........
.........

--

--

Eazy_web
Eazy_web

Written by Eazy_web

Welcome to Eazy web! I delve into Blue Team and Red Team strategies offering teaching and growth tips. Join me to explore travel, financial management, and more

No responses yet