zffacquire-1.0.1 is not a library.
zffacquire
zffacquire
is a command line utility for acquiring images and/or logical file/folder structures into the forensic format Zff.
Installation
Prerequisites
First, you need to install rust and cargo to build or install zffacquire
.
After that you still need the gcc, which you can install as follows (depends on the distribution):
Debian/Ubuntu
Fedora
Then you can easily build this tool yourself by using cargo:
Or you can install the tool directly from crates.io:
Usage
To create an image with the default parameters, the following command is just enough:
You can also dump a logical folder structure into a logical zff container:
And you can extend an zff container by adding additional containers:
The complete feature set of zffacquire
can be shown using zffacquire -h
.