Open Computer Forensics Architecture
{{multiple issues|
{{notability|Products|date=April 2013}}
{{more citations needed|date=February 2011}}
}}
{{Infobox software
| name = Open Computer Forensics Architecture
| developer = Korps landelijke politiediensten
| latest release version = 2.2.0pl4
| operating system = Linux
| language = English
| discontinued = yes
| genre = Computer forensics
| website = {{URL|http://sourceforge.net/apps/trac/ocfa/wiki}}
}}
The Open Computer Forensics Architecture (OCFA) is a distributed open-source computer forensics framework used to analyze digital media within a digital forensics laboratory environment. The framework was built by the Dutch national police.
Architecture
OCFA consists of a back end for the Linux platform, it uses a PostgreSQL database for data storage, a custom Content-addressable storage or CarvFS based data repository and a Lucene index. The front end for OCFA has not been made publicly available due to licensing issues.
The framework integrates with other open source forensic tools and includes modules for The Sleuth Kit, Scalpel, Photorec, libmagic, GNU Privacy Guard, objdump, exiftags, zip, 7-zip, tar, gzip, bzip2, rar, antiword, qemu-img, and mbx2mbox. OCFA is extensible in C++ or Java.
See also
External links
- {{Official website|http://sourceforge.net/apps/trac/ocfa/wiki}}
- [http://www.linux-magazine.com/Issues/2008/93/OCFA Linux Magazine article on OCFA]
- [https://www.springer.com/computer/security+and+cryptology/book/978-1-4419-5802-0 Open Source Software for Digital Forensics]
{{Digital forensics}}
Category:Digital forensics software
Category:Distributed computing architecture
Category:Software using the GNU Lesser General Public License
{{Free-software-stub}}