Version Author Date Comments
0.0.20 J.B. Metz August 17, 2006 Added information regarding SMART format generated by
FTK Imager. Corrected error about gzip compression in header
section.
0.0.21 J.B. Metz August 18, 2006 Added information regarding SMART format generated by
FTK Imager.
0.0.22 J.B. Metz August 22, 2006 Added information about segment file extension naming.
0.0.23 J.B. Metz September 8, 2006 Added information about EWF-L01 (LVF) format.
0.0.24 J.B. Metz September 22, 2006 Added information from EWF-L01 analysis.
0.0.25 J.B. Metz September 25, 2006 Changes after comments by Guy Voncken.
0.0.26 J.B. Metz October 12, 2006 Corrected error regarding EnCase 1 and SMART header
specification.
0.0.27 J.B. Metz October 19, 2006 Added theoretical maximum media size.
0.0.28 J.B. Metz October 22, 2006 Additional information about section start size in EnCase
(EWF-E01) next and done sections.
0.0.29 J.B. Metz November 27, 2006 Additional information about CRC algorithm.
0.0.30 J.B. Metz November 28, 2006 Fixed error regarding the location of the actual chunks in the
EnCase 1 format, which actually is the table sections and not
the sectors section.
0.0.31 J.B. Metz November 29, 2006 Additional information about the EnCase linen 5 (EWF-E01)
format.
0.0.32 J.B. Metz December 6, 2006 Additional information about GUID.
0.0.33 J.B. Metz December 16, 2006 Corrected error regarding header sections in EnCase 1 format.
0.0.34 J.B. Metz December 23, 2006 Added new information regarding the table section after
encountering a bug in FTK for EWF files with more than 16 *
1024 offset table entries.
0.0.35 J.B. Metz December 25, 2006 Corrected misinterpretation of original specifications,
regarding additional table sections.
0.0.36 J.B. Metz January 3, 2006 Added information about EnCase 6.
0.0.37 J.B. Metz January 7, 2006 Added information about linen 6.
0.0.38 J.B. Metz January 9, 2006 Added information about EnCase6/linen6 header.
Adjustments regarding media type and media flags.
0.0.39 J.B. Metz January 10, 2006 Added information about header values.
0.0.40 J.B. Metz January 20, 2006 Added information about EWF-X
0.0.41 J.B. Metz August 28, 2007 Added information about EnCase 6.7 >2Gb segment file
support.
0.0.42 J.B. Metz August 29, 2007 Added information about EnCase 6.7 >2Gb segment file
support and CD/DVD image session sector.
0.0.43 J.B. Metz September 5, 2007 Added information about EnCase 6.7 >2Gb segment file
support.
0.0.44 J.B. Metz September 15, 2007 Added page numbers.
0.0.45 J.B. Metz November 23, 2007 Added information about session section.
0.0.46 J.B. Metz March 10, 2008 Added information about session section.
0.0.47 J.B. Metz March 18, 2008 Added information about EnCase 6 >2GiB segment file format.
0.0.48 J.B. Metz June 1, 2008 Textual corrections.
0.0.49 J.B. Metz June 9, 2008 Added information about EnCase 6.11 winen file format.
0.0.50 J.B. Metz February9, 2009 Added information about EnCase 6.12 SHA1 hash support and
page iii
