<?xml version='1.0' encoding='utf-8'?>
<PRONOM-Report xmlns="http://pronom.nationalarchives.gov.uk">
  <report_format_detail>
    <FileFormat>
      <FormatID>1645</FormatID>
      <FormatName>Advanced Forensic Format</FormatName>
      <FormatVersion> </FormatVersion>
      <FormatAliases> </FormatAliases>
      <FormatFamilies> </FormatFamilies>
      <FormatTypes>Aggregate</FormatTypes>
      <FormatDisclosure> </FormatDisclosure>
      <FormatDescription>The Advanced Forensics Format (AFF) is an extensible open format for the storage of disk images and related forensic metadata. It was originally developed by Simson Garfinkel and Basis Technology.</FormatDescription>
      <BinaryFileFormat> </BinaryFileFormat>
      <ByteOrders> </ByteOrders>
      <ReleaseDate> </ReleaseDate>
      <WithdrawnDate> </WithdrawnDate>
      <ProvenanceSourceID>195</ProvenanceSourceID>
      <ProvenanceName>Artefactual Systems Inc / Artefactual Systems Inc</ProvenanceName>
      <ProvenanceSourceDate>04 Jan 2016</ProvenanceSourceDate>
      <ProvenanceDescription> </ProvenanceDescription>
      <LastUpdatedDate>04 Jan 2016</LastUpdatedDate>
      <FileFormatIdentifier>
        <Identifier>fmt/844</Identifier>
        <IdentifierType>PUID</IdentifierType>
      </FileFormatIdentifier>
      <ExternalSignature>
        <ExternalSignatureID> </ExternalSignatureID>
        <Signature>aff</Signature>
        <SignatureType>File extension</SignatureType>
      </ExternalSignature>
      <InternalSignature>
        <SignatureID>1203</SignatureID>
        <SignatureName>Advanced Forensic Format</SignatureName>
        <SignatureNote>8 byte header: AFF10…</SignatureNote>
        <ByteSequence>
          <ByteSequenceID>1</ByteSequenceID>
          <PositionType>Absolute from BOF</PositionType>
          <Offset>0</Offset>
          <MaxOffset>0</MaxOffset>
          <IndirectOffsetLocation> </IndirectOffsetLocation>
          <IndirectOffsetLength> </IndirectOffsetLength>
          <Endianness> </Endianness>
          <ByteSequenceValue>41464631300D0A00</ByteSequenceValue>
        </ByteSequence>
      </InternalSignature>
    </FileFormat>
  </report_format_detail>
</PRONOM-Report>