Package: dff (1.3.0+dfsg.1-4.1) [debports]

[ Source:  ]

Powerful, efficient and modular digital forensic framework

DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc.

The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules.

The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.

Other Packages Related to dff

• dep: libafflib0

  support for Advanced Forensics format

• dep: libavcodec55 (>= 6:10~beta1~)

  Package not available

  or libavcodec-extra-55 (>= 6:10.1)

  Package not available

• dep: libavdevice54 (>= 6:10~beta1~)

  Package not available

• dep: libavformat55 (>= 6:10~beta1~)

  Package not available

• dep: libavutil53 (>= 6:10~beta1~)

  Package not available

• dep: libbfio1 (>= 20120425)

  Library to provide basic input/output abstraction

• dep: libc6 (>= 2.17)

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

• dep: libewf2 (>= 20121209)

  library with support for Expert Witness Compression Format

• dep: libfuse2 (>= 2.6)

  Filesystem in Userspace (library)

• dep: libgcc1 (>= 1:4.7)

  GCC support library

• dep: libicu52 (>= 52~m1-1~)

  International Components for Unicode

• dep: libpff1 (>= 20120802)

  library to access various ms outlook files formats

• dep: libpython2.7 (>= 2.7)

  Shared Python runtime library (version 2.7)

• dep: libstdc++6 (>= 4.9)

  GNU Standard C++ Library v3

• dep: libswscale2 (>= 6:10~beta1~)

  Package not available

• dep: libtre5

  regexp matching library with approximate matching

• dep: python (<< 2.8)

  interactive high-level object-oriented language (default version)

  dep: python (>= 2.7)

• dep: python-dbus

  simple interprocess messaging system (Python interface)

• dep: python-magic

  Recognize the type of data in a file using "magic" numbers - Python bindings

• dep: python-qt4

  Python bindings for Qt4

• rec: dbus

  simple interprocess messaging system (daemon and utilities)

• rec: hal

  Package not available

• rec: libqt4-sql-sqlite

  Qt 4 SQLite 3 database driver

• rec: python-qt4-phonon

  Python bindings for Phonon

Download dff

Download for all available architectures

Architecture	Package Size	Installed Size	Files
arm64 (unofficial port)	4,036.9 kB	19,786.0 kB	[list of files]