Disk Image Formats
File systems and other file formats described on this page's parent page describe entities that exist on disks as they would normally used.
However, there are also file formats that allow a physical disk to be "imaged" into a file, either to re-copied onto a physical disk later, or else used by an *emulator* of the computer system that would have originally.
These file formats represent a data image of one of the physical floppy disk formats. In addition to the raw data from the disk, these formats may contain metadata that the corresponding emulator environment uses to correctly access the data.
Typically, when archiving a physical disk for later use, a physical disk will be imaged into one of these file formats. Sub-pages of this page should contain information on the format itself as well as instructions on how to extract a physical disk into that disk image format, including information about what physical drives are required, what software to use and how and what OS that is run under.
- Expert Witness (i.e. EnCase)
- Advanced Forensics Format (AFF)
- The_Sleuth_Kit_and_Autopsy can can read raw, Expert Witness, and AFF formats