How To Install afflib-tools on Debian 10

Learn how to install afflib-tools on Debian 10 with this tutorial. afflib-tools is Advanced Forensics Format Library (utilities)

Introduction

In this tutorial we learn how to install afflib-tools on Debian 10.

What is afflib-tools

afflib-tools is:

The Advanced Forensic Format (AFF) is on-disk format for storing computer forensic information. Critical features of AFF include:

  • AFF allows you to store both computer forensic data and associated metadata in one or more files.
  • AFF allows files to be digital signed, to provide for chain-of-custody and long-term file integrity.
  • AFF allows for forensic disk images to stored encrypted and decrypted on-the-fly for processing. This allows disk images containing privacy sensitive material to be stored on the Internet.

This package provides the AFF Toolkit, that is a set of programs for working with computer forensic information. Using these tools you can:

  • Interconvert disk images between a variety of formats, including:
    • raw or “dd”;
    • splitraw (in which a single image is split between multiple files);
    • AFF format (in which the entire disk image is stored in a single file);
    • AFD format (in which a disk image is stored in multiple AFF files stored in a single directory);
    • AFM format (in which an AFF file is used to annotate a raw file).
  • Compare disk images and report the data or metadata that is different.
  • Copy disk images from one location to another, with full verification of data, metadata, and the automatic generation of a chain-of-custody segment.
  • Find errors in an AFF file and fix them.
  • Print information about a file.
  • Print detailed statistics about a file
  • Generate a XML representation of a disk image’s metadata (for example, acquisition time or the serial number of the acquisition device).
  • Produce a XML “diskprint” which allows a disk image to be rapidly fingerprinted without having the computer the SHA1 of the entire disk.

The AFF Toolkit provides these executables: affcat, affcompare, affconvert, affcopy, affcrypto, affdiskprint, affinfo, affix, affrecover, affsegment, affsign, affstats, affuse, affverify and affxml.

There are three methods to install afflib-tools on Debian 10. We can use apt-get, apt and aptitude. In the following sections we will describe each method. You can choose one of them.

Install afflib-tools Using apt-get

Update apt database with apt-get using the following command.

sudo apt-get update

After updating apt database, We can install afflib-tools using apt-get by running the following command:

sudo apt-get -y install afflib-tools

Install afflib-tools Using apt

Update apt database with apt using the following command.

sudo apt update

After updating apt database, We can install afflib-tools using apt by running the following command:

sudo apt -y install afflib-tools

Install afflib-tools Using aptitude

If you want to follow this method, you might need to install aptitude first since aptitude is usually not installed by default on Debian. Update apt database with aptitude using the following command.

sudo aptitude update

After updating apt database, We can install afflib-tools using aptitude by running the following command:

sudo aptitude -y install afflib-tools

How To Uninstall afflib-tools on Debian 10

To uninstall only the afflib-tools package we can use the following command:

sudo apt-get remove afflib-tools

Uninstall afflib-tools And Its Dependencies

To uninstall afflib-tools and its dependencies that are no longer needed by Debian 10, we can use the command below:

sudo apt-get -y autoremove afflib-tools

Remove afflib-tools Configurations and Data

To remove afflib-tools configuration and data from Debian 10 we can use the following command:

sudo apt-get -y purge afflib-tools

Remove afflib-tools configuration, data, and all of its dependencies

We can use the following command to remove afflib-tools configurations, data and all of its dependencies, we can use the following command:

sudo apt-get -y autoremove --purge afflib-tools

Dependencies

afflib-tools have the following dependencies:

References

Summary

In this tutorial we learn how to install afflib-tools package on Debian 10 using different package management tools: apt, apt-get and aptitude.