Open Computer Forensics Architecture
It is proposed that this article be deleted because of the following concern:
If you can address this concern by improving, copyediting, sourcing, renaming, or merging the page, please edit this page and do so. You may remove this message if you improve the article or otherwise object to deletion for any reason. Although not required, you are encouraged to explain why you object to the deletion, either in your edit summary or on the talk page. If this template is removed, do not replace it. This message has remained in place for seven days, so the article may be deleted without further notice. Find sources: "Open Computer Forensics Architecture" – news · newspapers · books · scholar · JSTOR Nominator: Please consider notifying the author/project: {{subst:proposed deletion notify|Open Computer Forensics Architecture|concern=Unsourced for a year, no hint of notability}} ~~~~ Timestamp: 20120122204404 20:44, 22 January 2012 (UTC) Administrators: delete |
This article needs additional citations for verification. (February 2011) |
Open Computer Forensics Architecture | |
---|---|
Developer(s) | Korps landelijke politiediensten |
Stable release | 2.2.0pl4
|
Operating system | Linux |
Available in | English |
Type | Computer forensics |
Website | http://sourceforge.net/apps/trac/ocfa/wiki |
The Open Computer Forensics Architecture (OCFA) is an distributed open-source computer forensics framework used to analyze digital media within a digital forensics laboratory environment. The framework was built by the Dutch national police.
Architecture
OCFA consists of a back end for the Linux platform, it uses a PostgreSQL database for data storage, a custom Content-addressable storage or CarvFS based data repository and a Lucene index. The front end for OCFA has not been made publicly available due to licencing issues.
The framework integrates with other open source forensic tools and includes modules for The Sleuth Kit, Scalpel, Photorec, libmagic, GNU Privacy Guard, objdump, exiftags, zip, 7-zip, tar, gzip, bzip2, rar, antiword, qemu-img and mbx2mbox. OCFA is extensible in C++ or Java.