The program library libewf supports the SMART and EnCase data formats which are widely used in disk imaging. The library compiles under Linux, *BSD, OS-X and Microsoft Windows. The latest version was released on May 12, 2007 by its authors Robert-Jan Mora and Joachim Metz. More information is available from the release notes.
Some utility programs come along with the library:
- ewfacquire acquires data in the EWF format
- ewfacquirestream acquires data in the EWF format from stdin
- ewfexport exports media data stored in EWF files
- ewfinfo shows meta data stored in EWF files
- ewfverify verifies media data stored in EWF files
Libewf is used by several projects like The Sleuth Kit (TSK), libcarvpath for in-place carving, PhotoRec and the Advanced Forensics Format (AFF).
