If you're not using AFF4 (Advanced Forensics File Format v4) then your forensics process is stuck in the past. In this course we'll be discussing the performance problems associated with the Expert Witness Format (E01/EX01) and raw or DD forensic images.
By the end of this course, students should be able to:
Understand what AFF4 is
Realize the problems associated with common forensic file formats
Acknowledge the advantages of AFF4
Recognize the tools using AFF4