Package: dff (1.3.0+dfsg.1-4.1 and others)

[ Source: dff  ]

Powerful, efficient and modular digital forensic framework

DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc.

The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules.

The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.

Tags: System Administration: Forensics and Recovery, Role: Program, Security: Forensics

Other Packages Related to dff

• dep: libafflib0

  Advanced Forensics Format Library

• dep: libavcodec54 (>= 6:9.1-1) [m68k]

  Libav codec library

  or libavcodec-extra-54 (>= 6:9.10)

  Libav codec library (additional codecs)

  dep: libavcodec54 (>= 6:9.1-1) [hppa]

  or libavcodec-extra-54 (>= 6:9.11)

• dep: libavcodec56 (>= 6:11~beta1) [arm64, powerpcspe]

  Libav codec library

  or libavcodec-extra-56 (>= 6:11)

  Libav codec library (additional codecs)

  dep: libavcodec56 (>= 6:11~beta1) [not arm64, hppa, m68k, powerpcspe]

  or libavcodec-extra-56 (>= 6:11~beta1)

• dep: libavdevice53 (>= 6:9.1-1) [hppa, m68k]

  Libav device handling library

• dep: libavdevice55 (>= 6:11~beta1) [not hppa, m68k]

  Libav device handling library

• dep: libavformat54 (>= 6:9.1-1) [hppa, m68k]

  Libav file format library

• dep: libavformat56 (>= 6:11~beta1) [not hppa, m68k]

  Libav file format library

• dep: libavutil52 (>= 6:9.1-1) [hppa, m68k]

  Libav utility library

• dep: libavutil54 (>= 6:11~beta1) [not hppa, m68k]

  Libav utility library

• dep: libbfio1 (>= 20120425)

  Library to provide basic input/output abstraction

• dep: libc0.1 (>= 2.17-91) [kfreebsd-amd64, kfreebsd-i386]

  GNU C Library: Shared libraries
  also a virtual package provided by libc0.1-udeb

• dep: libc6 (>= 2.11) [hppa]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.14) [amd64]

  dep: libc6 (>= 2.16) [x32]

  dep: libc6 (>= 2.17) [arm64, ppc64el]

  dep: libc6 (>= 2.4) [not alpha, amd64, arm64, hppa, kfreebsd-amd64, kfreebsd-i386, ppc64el, sparc, x32]

  dep: libc6 (>= 2.6) [sparc]

• dep: libc6.1 (>= 2.4) [alpha]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6.1-udeb

• dep: libewf2 (>= 20121209)

  library with support for Expert Witness Compression Format

• dep: libfuse2 (>= 2.6) [not hppa, m68k]

  Filesystem in Userspace (library)

  dep: libfuse2 (>= 2.8.1) [hppa, m68k]

• dep: libgcc1 [x32]

  GCC support library

  dep: libgcc1 (>= 1:4.1.1) [not arm64, armel, armhf, hppa, m68k, x32]

  dep: libgcc1 (>= 1:4.4.0) [armel, armhf]

  dep: libgcc1 (>= 1:4.7) [arm64]

• dep: libgcc2 (>= 4.2.1) [m68k]

  GCC support library

• dep: libgcc4 (>= 4.1.1) [hppa]

  GCC support library

• dep: libicu52 (>= 52~m1-1~)

  International Components for Unicode

• dep: libpff1 (>= 20120802)

  library to access various ms outlook files formats.

• dep: libpython2.7 (>= 2.7)

  Shared Python runtime library (version 2.7)

• dep: libstdc++6 [x32]

  GNU Standard C++ Library v3

  dep: libstdc++6 (>= 4.6) [hppa, m68k]

  dep: libstdc++6 (>= 4.9) [not hppa, m68k, x32]

• dep: libswscale2 (>= 6:9.1-1) [hppa, m68k]

  Libav video scaling library

• dep: libswscale3 (>= 6:11~beta1) [not hppa, m68k]

  Libav video scaling library

• dep: libtre5

  regexp matching library with approximate matching

• dep: python (<< 2.8)

  interactive high-level object-oriented language (default version)

  dep: python (>= 2.7)

• dep: python-dbus

  simple interprocess messaging system (Python interface)

• dep: python-magic

  File type determination library using "magic" numbers (Python bindings)

• dep: python-qt4

  Python bindings for Qt4

• rec: dbus

  simple interprocess messaging system (daemon and utilities)

• rec: hal

  Hardware Abstraction Layer

• rec: libqt4-sql-sqlite

  Qt 4 SQLite 3 database driver

• rec: python-qt4-phonon

  Python bindings for Phonon

Download dff

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	1.3.0+dfsg.1-4.1+b2	4,287.2 kB	22,070.0 kB	[list of files]
amd64	1.3.0+dfsg.1-4.1+b2	4,304.3 kB	19,432.0 kB	[list of files]
arm64	1.3.0+dfsg.1-4.1	4,104.0 kB	19,523.0 kB	[list of files]
armel	1.3.0+dfsg.1-4.1+b2	3,985.8 kB	18,956.0 kB	[list of files]
armhf	1.3.0+dfsg.1-4.1+b2	4,059.5 kB	17,280.0 kB	[list of files]
hppa (unofficial port)	1.3.0+dfsg.1-4.1	4,187.0 kB	24,287.0 kB	[list of files]
i386	1.3.0+dfsg.1-4.1+b2	4,198.5 kB	18,901.0 kB	[list of files]
kfreebsd-amd64	1.3.0+dfsg.1-4.1+b2	4,299.2 kB	19,464.0 kB	[list of files]
kfreebsd-i386	1.3.0+dfsg.1-4.1+b2	4,209.6 kB	18,930.0 kB	[list of files]
m68k (unofficial port)	1.3.0+dfsg.1-4	4,117.7 kB	19,081.0 kB	[list of files]
mips	1.3.0+dfsg.1-4.1+b2	3,741.2 kB	21,147.0 kB	[list of files]
mipsel	1.3.0+dfsg.1-4.1+b2	3,774.1 kB	21,147.0 kB	[list of files]
powerpc	1.3.0+dfsg.1-4.1+b2	4,008.1 kB	19,997.0 kB	[list of files]
powerpcspe (unofficial port)	1.3.0+dfsg.1-4.1	4,012.5 kB	19,505.0 kB	[list of files]
ppc64 (unofficial port)	1.3.0+dfsg.1-4.1+b2	4,103.3 kB	21,806.0 kB	[list of files]
ppc64el	1.3.0+dfsg.1-4.1	4,106.7 kB	20,822.0 kB	[list of files]
s390x	1.3.0+dfsg.1-4.1+b2	4,201.8 kB	20,923.0 kB	[list of files]
sparc	1.3.0+dfsg.1-4.1+b1	3,913.9 kB	19,891.0 kB	[list of files]
x32 (unofficial port)	1.3.0+dfsg.1-4.1+b1	4,302.2 kB	19,178.0 kB	[list of files]