Open Computer Forensics Architecture: Difference between revisions

Revision as of 07:13, 8 January 2025

Revision as of 14:31, 24 July 2025

Line 16:

==Architecture==

OCFA consists of a [[Front and back ends|back end]] for the [[Linux]] platform, it uses a [[PostgreSQL]] database for data storage, a custom [[Content-addressable storage]] or CarvFS based data repository, and a [[Lucene]] index. The [[front end processor (program)|front end]] for OCFA has not been made publicly available due to licensing issues.

The framework integrates with other open source forensic tools and includes modules for [[The Sleuth Kit]], Scalpel, Photorec, libmagic, [[GNU Privacy Guard]], [[objdump]], exiftags, zip, [[7-zip]], [[tar (computing)|tar]], [[gzip]], [[bzip2]], [[RAR (file format)|rar]], [[antiword]], qemu-img, and mbx2mbox. OCFA is extensible in [[C++]] or [[Java (programming language)|Java]].