ANNOUNCING AFFLIB 3.3 I'm happy to announce the release of AFFLIB 3.3. You can download it from the standard location at http://www.afflib.org/ Version 3.0 is a significant upgrade to AFFLIB which introduces the following features: * SUPPORT FOR VMWARE, PARALLELS, APPLE DMG DISK IMAGES * SIGNIFICANTLY IMPROVED PERFORMANCE ================================================================ SUPPORT FOR VMWARE DISK IMAGES AFFLIB 3.3 incorporates the disk image subsystem from the open-source QEMU processor virtualization project. Although most of QEMU is distributed under the GPL license, the disk subsystem is distributed under a less restrictive license that allows any use. As a result, forensic programs linked with AFFLIB can now transparently access disk images stored in any of the following formats; currently the format is specified with the indicated extension. So far we have only tested with VMWare .vmdk images: * VMWare VMDK (.vmdk) (tested) We also have the ability to add additional file types, including: * Bochs Virtual HD Image * cloop * cow * DMG * qcow * qcow2 * VFAT * Parallels * Connectix Virtual PC Support for these will be enabled if requested. ================================================================ SIGNIFICANTLY IMPROVED PERFORMANCE Now that the feature set for AFFLIB is largely complete, we are beginning to pay attention to performance issues. In particular, we found a significant problem in versions 3.0 through 3.2 that would significantly degrade performance of disk images larger than 1GB. This has now been addressed. ================================================================