This is a GUI (for Windows 64 bit) for a procedure to virtualize your EWF(E01), DD (raw), AFF disk image file without converting it, directly with VirtualBox, forensically proof.
-
Updated
Oct 15, 2019 - Pascal
#
ewf
Here are 8 public repositories matching this topic...
Pure Rust reader for Expert Witness Format (E01/EWF) forensic disk images. MIT licensed.
-
Updated
Mar 6, 2026 - Rust
🕵️♂️ Unlock the story hidden in data - Your digital investigation partner. TheSleuthKit (TSK) Python Wrapper.
python wrapper analysis python3 forensics dfir python-wrapper disk-image image-forensics python-security sleuthkit tsk forensic regripper ewf dfir-automation disk-forensics image-forensic forensic-software thesleuthkit
-
Updated
Mar 20, 2025 - Python
SwiftBeaver is a high-speed file and artefact carver written in Rust that recovers files (JPEG, PNG, PDF, ZIP, SQLite, MP4, and many more) and Windows artefacts from raw and E01 disk images. It emphasizes reproducibility, read-only evidence handling, and rich JSONL/CSV/Parquet metadata, with optional OpenCL/CUDA acceleration.
-
Updated
Apr 26, 2026 - Rust
-
Updated
Jul 13, 2025
ZFF review
rust security compression disk container forensics partition acquisition imaging preservation evidence e01 ewf fuse3 zff
-
Updated
Nov 4, 2025 - PowerShell
Improve this page
Add a description, image, and links to the ewf topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the ewf topic, visit your repo's landing page and select "manage topics."