Package: dff (1.3.0+dfsg.1-4 and others)

[ Source: dff  ]

Powerful, efficient and modular digital forensic framework

DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc.

The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules.

The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.

Tags: System Administration: Forensics and Recovery, Role: Program, Security: Forensics

Other Packages Related to dff

• dep: libafflib0 [not m68k]

  support for Advanced Forensics format

• dep: libavcodec53 (>= 6:0.8.3-1~) [x32]

  Package not available

  or libavcodec-extra-53 (>= 6:0.8.5)

  Package not available

• dep: libavcodec54 (>= 6:9.1-1) [not m68k, x32]

  Libav codec library

  or libavcodec-extra-54 (>= 6:9.10)

  Libav codec library (additional codecs)

• dep: libavdevice53 (>= 6:0.8.3-1~) [x32]

  Libav device handling library

  dep: libavdevice53 (>= 6:9.1-1) [not m68k, x32]

• dep: libavformat53 (>= 6:0.8.3-1~) [x32]

  Package not available

• dep: libavformat54 (>= 6:9.1-1) [not m68k, x32]

  Libav file format library

• dep: libavutil51 (>= 6:0.8.3-1~) [x32]

  Package not available

• dep: libavutil52 (>= 6:9.1-1) [not m68k, x32]

  Libav utility library

• dep: libbfio1 (>= 20120425) [not m68k]

  Library to provide basic input/output abstraction

• dep: libc0.1 (>= 2.17-91) [kfreebsd-amd64, kfreebsd-i386]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc0.1-udeb

• dep: libc6 (>= 2.11) [hppa]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.14) [amd64]

  dep: libc6 (>= 2.16) [x32]

  dep: libc6 (>= 2.17) [ppc64]

  dep: libc6 (>= 2.2) [m68k]

  dep: libc6 (>= 2.4) [armel, armhf, i386, mips, mipsel, powerpc, powerpcspe, s390x]

• dep: libc6.1 (>= 2.4) [alpha]

  Package not available

• dep: libewf2 (>= 20121209) [not m68k]

  library with support for Expert Witness Compression Format

• dep: libfuse2 (>= 2.8.1)

  Filesystem in Userspace (library)

• dep: libgcc1 [x32]

  GCC support library

  dep: libgcc1 (>= 1:4.1.1) [not armel, armhf, hppa, m68k, x32]

  dep: libgcc1 (>= 1:4.4.0) [armel, armhf]

• dep: libgcc2 (>= 4.2.1) [m68k]

  GCC support library

• dep: libgcc4 (>= 4.1.1) [hppa]

  GCC support library

• dep: libicu52 (>= 52~m1-1~) [not m68k]

  International Components for Unicode

• dep: libmagic1 [m68k]

  File type determination library using "magic" numbers

• dep: libpff1 (>= 20120802) [not m68k]

  library to access various ms outlook files formats.

• dep: libpython2.6 (>= 2.6) [m68k]

  Shared Python runtime library (version 2.6)

• dep: libpython2.7 (>= 2.7)

  Shared Python runtime library (version 2.7)

• dep: libstdc++6 [x32]

  GNU Standard C++ Library v3

  dep: libstdc++6 (>= 4.6) [not x32]

• dep: libswscale2 (>= 6:0.8.3-1~) [x32]

  Libav video scaling library

  dep: libswscale2 (>= 6:9.1-1) [not m68k, x32]

• dep: libtre5 [not m68k]

  regexp matching library with approximate matching

• dep: python (<< 2.8)

  interactive high-level object-oriented language (default version)

  dep: python (>= 2.6.6-7~) [m68k]

  dep: python (>= 2.7) [not m68k]

• dep: python-dbus [not m68k]

  simple interprocess messaging system (Python interface)

• dep: python-magic

  File type determination library using "magic" numbers (Python bindings)

• dep: python-qt4

  Python bindings for Qt4

• rec: dbus

  simple interprocess messaging system (daemon and utilities)

• rec: hal

  Hardware Abstraction Layer

• rec: libqt4-sql-sqlite

  Qt 4 SQLite 3 database driver

• rec: python-dbus [m68k]

  simple interprocess messaging system (Python interface)

• rec: python-qt4-phonon

  Python bindings for Phonon

Download dff

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	1.3.0+dfsg.1-4	4,209.2 kB	22,556.0 kB	[list of files]
amd64	1.3.0+dfsg.1-4	4,258.6 kB	20,196.0 kB	[list of files]
armel	1.3.0+dfsg.1-4	3,947.7 kB	19,253.0 kB	[list of files]
armhf	1.3.0+dfsg.1-4	4,009.9 kB	17,654.0 kB	[list of files]
hppa (unofficial port)	1.3.0+dfsg.1-4	4,171.6 kB	24,287.0 kB	[list of files]
i386	1.3.0+dfsg.1-4	4,169.9 kB	18,828.0 kB	[list of files]
kfreebsd-amd64	1.3.0+dfsg.1-4	4,263.9 kB	19,446.0 kB	[list of files]
kfreebsd-i386	1.3.0+dfsg.1-4	4,171.6 kB	18,907.0 kB	[list of files]
m68k (unofficial port)	1.2.0+dfsg.1-1	15,732.7 kB	36,343.0 kB	[list of files]
mips	1.3.0+dfsg.1-4	3,716.0 kB	21,535.0 kB	[list of files]
mipsel	1.3.0+dfsg.1-4	3,756.0 kB	21,535.0 kB	[list of files]
powerpc	1.3.0+dfsg.1-4	3,990.7 kB	19,964.0 kB	[list of files]
powerpcspe (unofficial port)	1.3.0+dfsg.1-4	3,976.6 kB	19,147.0 kB	[list of files]
ppc64 (unofficial port)	1.3.0+dfsg.1-4	4,045.6 kB	22,133.0 kB	[list of files]
s390x	1.3.0+dfsg.1-4	4,171.9 kB	21,288.0 kB	[list of files]
x32 (unofficial port)	1.3.0+dfsg.1-4	4,283.7 kB	19,565.0 kB	[list of files]