12 unstable releases (4 breaking)
| 0.5.3 | Mar 3, 2026 |
|---|---|
| 0.5.1 | Feb 24, 2026 |
| 0.3.4 | Aug 15, 2025 |
| 0.3.3 | Jul 13, 2025 |
| 0.1.1 | Mar 31, 2025 |
#1956 in Filesystem
28 downloads per month
Used in 8 crates
175KB
3.5K
SLoC
🧬 Exhume Body
The exhume Body module is part of the exhume toolkit and is allowing you to examine, investigate and abstracting a body of data using different file formats.
The current supported formats are:
- RAW
- EWF
- VMDK
- AFF
- AFF4 (Cellebrite/MacQuisition implementation).
VMFSSparse (ESXi snapshots, delta files, linked clones) and full physical disk or partition-wide VMDK volumes are not supported. AFF4 parser still needs improvement to cover more implementations.
📄 Getting started
You can find the full installation and usage guide here: https://www.forensicxlab.com/docs/category/exhume---body
Related Blog posts
Dependencies
~6–8.5MB
~154K SLoC