Open Computer Forensics Architecture: Difference between revisions

Revision as of 14:25, 10 August 2011

Latest revision as of 02:22, 11 August 2025

(24 intermediate revisions by 19 users not shown)

Line 1:

{{multiple issues|

{{refimprove|date=February 2011}}

{{notability|Products|date=April 2013}}

{{refimprovemore citations needed|date=February 2011}}

}}

{{Infobox software

| name = Open Computer Forensics Architecture

| developer = [[National Police Corps = [[(Netherlands)|Korps landelijke politiediensten]]

| latest release version = 2.2.0pl4

| operating system = [[Linux]]

| language = [[English language|English]]

| discontinued = yes

| status = Active

| genre = [[Computer forensics]]

| website = [http://sourceforge.net/apps/trac/ocfa/wiki http{{URL|https://sourceforge.net/apps/trac/ocfa/wiki]}}

}}

The '''Open Computer Forensics Architecture''' (OCFA) is ana [[distributed computing|distributed]] [[open-source software|open-source]] [[computer forensics]] framework used to analyze [[digital media]] within a digital forensics laboratory environment. The framework was built by the [[HollandNetherlands|Dutch]] national police.

The '''Open Computer Forensics Architecture''' (OCFA) is an [[distributed computing|distributed]] [[open source]] [[computer forensics]] framework used to analyze [[digital media]] within a digital forensics laboratory environment. The framework was built by the [[Holland|Dutch]] national police.

==Architecture==

OCFA consists of a [[Front and back ends|back end]] for the [[Linux]] platform, it uses a [[PostgreSQL]] database for data storage, a custom [[Content-addressable storage]] or CarvFS based data repository, and a [[Lucene]] index. The [[front end processor (program)|front end]] for OCFA has not been made publicly available due to licencinglicensing issues.

The framework integrates with other open source forensic tools and includes modules for [[The Sleuth Kit]], Scalpel, Photorec, libmagic, [[GNU Privacy Guard]], [[objdump]], exiftags, zip, [[7-zip]], [[tar (computing)|tar]], [[gzip]], [[bzip2]], [[RAR (file format)|rar]], [[antiword]], qemu-img, and mbx2mbox. OCFA is extensible in [[C++]] or [[Java (programming language)|Java]].

[[GNU Privacy Guard]], [[objdump]], exiftags, zip, [[7-zip]], [[tar]], [[gzip]], [[bzip2]], [[rar]], [[antiword]], qemu-img and mbx2mbox. OCFA is extensible in [[C++]] or [[Java (programming language)|Java]].

==See also==

* [[List of digital forensics tools]]

==External links==

{{software-stub}}

* {{Official website|https://sourceforge.net/apps/trac/ocfa/wiki}}

* [http://www.linux-magazine.com/Issues/2008/93/OCFA Linux Magazine article on OCFA]

* [https://www.springer.com/computer/security+and+cryptology/book/978-1-4419-5802-0 Open Source Software for Digital Forensics]

{{Digital forensics}}

[[Category:Computer forensics]]

[[Category:Digital forensics software]]

[[Category:Data recovery]]

[[Category:Distributed computing architecture]]

[[Category:Software using the GNU Lesser General Public License]]

{{Free-software-stub}}