Implementation of Libewfcs

Abstract

libewfcs is a a C# library that can read the Expert Witness Format (EWF) . E01 for computer forensic information such as disk images. libewfcs provides portability and security that is not available in existing solutions and also provides a means for cross-validation with existing EWF readers. In addition to providing basic EWF reading services, libewfcs permits reading from custom EWF input streams, provides image streaming capability, and internally optimizes performance using caching and aligned reading. This document describes the interfaces and internal operation of libewfcs.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Sep 26, 2011
Accession Number
ADA550432

Entities

People

  • Bruce Allen

Organizations

  • Naval Postgraduate School

Tags

Communities of Interest

  • Materials and Manufacturing Processes

DTIC Thesaurus Topics

  • Abstracts
  • Algorithms
  • Boundaries
  • California
  • Compression
  • Computer Programs
  • Computer Science
  • Computers
  • Decompression
  • Department Of Defense
  • Governments
  • Information Operations
  • Instructions
  • Language
  • Metadata
  • Optimization
  • Validation

Fields of Study

  • Computer science

Readers

  • Parallel and Distributed Computing.
  • Polymer Science and Engineering.
  • Psychometric Testing or Psychological Assessment.