Package: dff (1.3.0+dfsg.1-4.1 and others)

[ Source: dff  ]

Powerful, efficient and modular digital forensic framework

DFF is a powerful open source tool with a flexible module system which will help you in your digital forensics works, including files recovery due to error or crash, evidence research and analysis, etc.

The modules allows you to examine the layout of disk images, devices and other media, to identify partitions, search for files using name, attributes, files magic etc. Files can also be analyzed or extracted using file analysis modules.

The source code is written in C++ and Python, allowing performances and great extensibility, and provides both graphical and command line interface.

Tags: System Administration: Forensics and Recovery, Role: Program, Security: Forensics

Other Packages Related to dff

• dep: libafflib0

  support for Advanced Forensics format

• dep: libavcodec53 (>= 6:0.8.3-1~) [x32]

  Package not available

  or libavcodec-extra-53 (>= 6:0.8.5)

  Package not available

• dep: libavcodec54 (>= 6:9.1-1) [m68k, powerpcspe]

  Libav codec library

  or libavcodec-extra-54 (>= 6:9.10)

  Libav codec library (additional codecs)

  dep: libavcodec54 (>= 6:9.1-1) [not m68k, powerpcspe, x32]

  or libavcodec-extra-54 (>= 6:9.11)

• dep: libavdevice53 (>= 6:0.8.3-1~) [x32]

  Libav device handling library

  dep: libavdevice53 (>= 6:9.1-1) [not x32]

• dep: libavformat53 (>= 6:0.8.3-1~) [x32]

  Package not available

• dep: libavformat54 (>= 6:9.1-1) [not x32]

  Libav file format library

• dep: libavutil51 (>= 6:0.8.3-1~) [x32]

  Package not available

• dep: libavutil52 (>= 6:9.1-1) [not x32]

  Libav utility library

• dep: libbfio1 (>= 20120425)

  Library to provide basic input/output abstraction

• dep: libc0.1 (>= 2.17-91) [kfreebsd-amd64, kfreebsd-i386]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc0.1-udeb

• dep: libc6 (>= 2.11) [hppa]

  Embedded GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.14) [amd64]

  dep: libc6 (>= 2.16) [x32]

  dep: libc6 (>= 2.4) [not alpha, amd64, hppa, kfreebsd-amd64, kfreebsd-i386, x32]

• dep: libc6.1 (>= 2.4) [alpha]

  Package not available

• dep: libewf2 (>= 20121209)

  library with support for Expert Witness Compression Format

• dep: libfuse2 (>= 2.6) [alpha, ppc64]

  Filesystem in Userspace (library)

  dep: libfuse2 (>= 2.8.1) [not alpha, ppc64]

• dep: libgcc1 [x32]

  GCC support library

  dep: libgcc1 (>= 1:4.1.1) [not armel, armhf, hppa, m68k, x32]

  dep: libgcc1 (>= 1:4.4.0) [armel, armhf]

• dep: libgcc2 (>= 4.2.1) [m68k]

  GCC support library

• dep: libgcc4 (>= 4.1.1) [hppa]

  GCC support library

• dep: libicu52 (>= 52~m1-1~)

  International Components for Unicode

• dep: libpff1 (>= 20120802)

  library to access various ms outlook files formats.

• dep: libpython2.7 (>= 2.7)

  Shared Python runtime library (version 2.7)

• dep: libstdc++6 [x32]

  GNU Standard C++ Library v3

  dep: libstdc++6 (>= 4.6) [not x32]

• dep: libswscale2 (>= 6:0.8.3-1~) [x32]

  Libav video scaling library

  dep: libswscale2 (>= 6:9.1-1) [not x32]

• dep: libtre5

  regexp matching library with approximate matching

• dep: python (<< 2.8)

  interactive high-level object-oriented language (default version)

  dep: python (>= 2.7)

• dep: python-dbus

  simple interprocess messaging system (Python interface)

• dep: python-magic

  File type determination library using "magic" numbers (Python bindings)

• dep: python-qt4

  Python bindings for Qt4

• rec: dbus

  simple interprocess messaging system (daemon and utilities)

• rec: hal

  Hardware Abstraction Layer

• rec: libqt4-sql-sqlite

  Qt 4 SQLite 3 database driver

• rec: python-qt4-phonon

  Python bindings for Phonon

Download dff

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	1.3.0+dfsg.1-4.1	4,222.7 kB	22,556.0 kB	[list of files]
amd64	1.3.0+dfsg.1-4.1	4,275.0 kB	20,192.0 kB	[list of files]
armel	1.3.0+dfsg.1-4.1	3,955.6 kB	19,246.0 kB	[list of files]
armhf	1.3.0+dfsg.1-4.1	4,017.2 kB	17,662.0 kB	[list of files]
hppa (unofficial port)	1.3.0+dfsg.1-4.1	4,187.0 kB	24,287.0 kB	[list of files]
i386	1.3.0+dfsg.1-4.1	4,178.9 kB	19,653.0 kB	[list of files]
kfreebsd-amd64	1.3.0+dfsg.1-4.1	4,262.0 kB	19,442.0 kB	[list of files]
kfreebsd-i386	1.3.0+dfsg.1-4.1	4,173.9 kB	18,907.0 kB	[list of files]
m68k (unofficial port)	1.3.0+dfsg.1-4	4,117.7 kB	19,081.0 kB	[list of files]
mips	1.3.0+dfsg.1-4.1	3,724.3 kB	21,535.0 kB	[list of files]
mipsel	1.3.0+dfsg.1-4.1	3,757.2 kB	21,535.0 kB	[list of files]
powerpc	1.3.0+dfsg.1-4.1	3,990.9 kB	20,415.0 kB	[list of files]
powerpcspe (unofficial port)	1.3.0+dfsg.1-4	3,976.6 kB	19,147.0 kB	[list of files]
ppc64 (unofficial port)	1.3.0+dfsg.1-4.1	4,044.2 kB	22,133.0 kB	[list of files]
s390x	1.3.0+dfsg.1-4.1	4,206.2 kB	21,316.0 kB	[list of files]
x32 (unofficial port)	1.3.0+dfsg.1-4	4,283.7 kB	19,565.0 kB	[list of files]