45  ewfacquire(1) - Kailash Tool Reference

45.1 ewfacquire

ewfacquire - Acquires evidence in the Expert Witness Compression Format (libewf).

Layer CLASSIC
Category c-09-forensics-ir-reporting
Safety class safe
Licence LGPL-3.0-only
Upstream github.com/libyal/libewf

45.1.1 NAME

ewfacquire - Acquires evidence in the Expert Witness Compression Format (libewf).

45.1.2 SYNOPSIS

Not derived automatically - see upstream documentation. This page does not hand-copy flags (generation contract, ADR-0001).

45.1.3 DESCRIPTION (upstream)

libewf is a library to access the Expert Witness Compression Format (EWF). Project information: * Status: experimental * Licence: LGPL-3.0-or-later Read or write supported EWF formats: * SMART .s01 (EWF-S01) * EnCase * .E01 (EWF-E01) * .Ex01 (EWF2-Ex01) Not supported: * .Ex01 (EWF2-Ex01) bzip2 compression (work in progress) * .Ex01 (EWF2-Ex01) encryption Read-only supported EWF formats: * Logical Evidence File (LEF) * .L01 (EWF-L01) * .Lx01 (EWF2-Lx01) Other features: * empty-block compression * read/write access using delta (or shadow) files * write resume Work in progress: * Dokan library support (experimental) * Python bindings (including Python 3 support) * write EWF2-Ex01 support * Mult

45.1.4 SEE ALSO

ref: pin - verified 2026-10-14