Skip to content

v2.5.0

Pre-release
Pre-release
Compare
Choose a tag to compare
@fservida fservida released this 26 Aug 07:56
· 111 commits to master since this release
v2.5.0
b25b2eb
This commit was signed with the committer’s verified signature.
fservida Francesco Servida
GPG key ID: 3C83B66C79A0C0AE
Verified
Learn about vigilant mode.

First stable release with AFF4-L support. | UPDATE: PyAFF library linked to this release contains a bug that rendered impossible to create containers larger than 2^31-1 bytes (2GB), this is fixed in v2.5.1 and pyAFF

  1. The AFF4-L containers created with Gemino are compliant with standard published in https://www.sciencedirect.com/science/article/pii/S1742287619301653

  2. The containers can be read and verified by pyaff tool

  3. AFF4-L support is still considered beta level because of the low compatibility by major forensic solutions of AFF4-L format.

  4. To reduce impact due to point 4 the containers are created using only ZipSegments independently of file size to improve compatibility. If the tool does not support AFF4-L standard, or fails to process the data, the container can still be imported as ZIP archive.

    • When imported this way the drawback will be inability to verify or process the metadata. Empty folders will also not be imported if using this workaround as they are not stored in the zip archive but only in the metadata file for AFF4-L.
    • Containers with ZipSegments of arbitrary file sizes might be less performant as the whole segment needs to be loaded in memory when doing random seek, this approach was still chosen to ensure AFF4-L images created with Gemino have the widest possible compatibility with existing tools.

Full Changelog: v2.2.0...v2.5.0

Assets 2
Loading