AFF file format is used by which forensic software?

• A. Autopsy and Sleuth Kit
• B. EnCase
• C. FTK
• D. X-Ways

Answer: (A)

The Advanced Forensic File Format (AFF) is an open, flexible disk image container designed to store both the data and rich metadata needed for forensic analysis. Autopsy and The Sleuth Kit are the tools most closely associated with AFF, and they natively support opening and parsing AFF images to examine file systems, extract artifacts, and perform investigations. This native compatibility makes them the best match for AFF among common forensic software.

Other tools like EnCase, FTK, or X-Ways typically rely on their own native or proprietary image formats (for example, EnCase often uses EWF or its own formats, FTK uses AD1, and X-Ways uses its own formats). While these tools may sometimes work with various image types, AFF is most strongly linked to Autopsy and Sleuth Kit.