Evimetry X-Ways Plugin
NATIVE AFF4 ITEROPABILITY FOR X-WAYS FORENSICS.
Evimetry's filesystem bridge provides a straightforward and efficient way of consuming AFF4 images from any commercial forensic tool, and results in faster analysis & processing than legacy E01 forensic images. Despite this, it is convenient to be able to open AFF4 images directly from tools without having this dependency.
In October 2017 we worked closely with Stefan Fleischmann of X-Ways to define a plug-in API to support new forensic image formats, which X-Ways integrated in the 19.5 beta releases. We followed this up with the public release of this plugin in December 2017.
Download the current Evimetry AFF4 Reader Plugin for X-Ways (v2.0.6), and copy the contents into the X-Ways installation folder. Make sure you have the Visual C++ 2015 Runtime installed.
|v2.0.2||9 Dec 2017||First public release of plugin.|
|v2.0.3||18 Jun 2019||Revised release of plugin to support backward compatibility with pre-AFF4 Standard v1.0 images.|
|v2.0.4||25 Jun 2019||Bump version and add more instructions to README. No changes in code.|
|v2.0.5||2 Jul 2019||Support for out of order map entries generated by MQ/C-AFF4.|
|v2.0.6||3 Jul 2019||Add compatibility for non standard MQ Volume class type, so shift-open works in X-Ways.|