Expert Witness

The Encase Image File Format or Expert Witness Disk Image format is a forensic disk image which includes evidentiary metadata. The file format includes a "case info" header.

The EWF format has been reversed engineered.

Software

 * FTK Imager