Automic VaultAutomic Vault

brew

使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper 安装 libewf

查看 libewf 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install libewf

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install libewf

MacPorts ports tree · security/libewf/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%
sudo apk add libewf

Alpine Linux edge package indexes · libewf · 来源: dl-cdn.alpinelinux.org

Fedora dnf已验证 · 92%
sudo dnf install libewf

Fedora Rawhide package metadata · libewf · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#libewf

nixpkgs package indexes · pkgs/by-name/li/libewf/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S libewf

Arch Linux sync databases · libewf · 来源: geo.mirror.pkgbuild.com

Debian apt已验证 · 92%
sudo apt install ewf-tools

Debian stable package indexes · ewf-tools · 来源: deb.debian.org

openSUSE zypper已验证 · 92%
sudo zypper install libewf-devel

openSUSE Tumbleweed package metadata · libewf-devel · 来源: download.opensuse.org

概览

软件包摘要

Library for support of the Expert Witness Compression Format

命令和别名

  • ewfacquire
  • ewfacquirestream
  • ewfdebug
  • ewfexport
  • ewfinfo
  • ewfmount
  • ewfrecover
  • ewfverify

历史

项目历史与用法

libewf is the libyal library and tool suite for reading, writing, acquiring, verifying, exporting, and mounting Expert Witness Compression Format evidence files. Its package-manager identity is tied to digital forensics because EWF/E01 images are common interchange artifacts between acquisition tools, forensic suites, and open-source analysis workflows.

项目历史

Joachim Metz began documenting the EWF file format in March 2006, with libewf's legacy ChangeLog recording release-preparation work in April 2006. The project grew alongside a public working specification for the format, covering SMART, EnCase E01, logical evidence files, and later EWF2 variants.

The libyal repositories split the actively experimental libewf tree from a stable legacy tree. Homebrew's curation points at the legacy repository, while the project documentation and README describe the broader libewf effort.

采用历史

EWF became important because forensic images produced by EnCase, FTK Imager, SMART, and related tools needed open readers and converters. libewf gave Unix package ecosystems a reusable C library plus tools such as ewfacquire, ewfinfo, ewfexport, ewfmount, and ewfverify.

Distribution packages under names such as libewf, ewf-tools, and ewftools made E01 handling available outside proprietary forensic workstations.

使用方式

Package users commonly install libewf for command-line acquisition and conversion, for mounting or inspecting EWF images, or as a dependency of forensic applications that need E01/S01/L01 support.

为什么软件包爱好者会关心

libewf is package-nerd useful because it turns a proprietary-forensics file family into a normal Unix library and set of small tools. It also carries one of the clearest public format documents for EWF, making it useful to preservation, incident response, and forensic packaging work.

时间线

  • 2006-03: Initial public EWF specification revisions for the libewf project.
  • 2006-04: Legacy ChangeLog records first-release preparation and tool renames such as ewfcat to ewfexport and ewfmd5sum to ewfverify.
  • 2014: Legacy ChangeLog records stabilization work and synchronization with the experimental libewf tree.
  • 2026: The EWF specification document records maintenance through 2006-2026.

Related projects

  • Related projects include the libyal family of forensic libraries, The Sleuth Kit integrations, EnCase, FTK Imager, and forensic package sets that ship ewf-tools.

安全态势

风险级别：绿色

library-like package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • library-like package without higher-risk signals

信号

  • metadata:library-like

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 1 个运行时依赖。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
ewfacquirecli全局可执行文件
ewfacquirestreamcli全局可执行文件
ewfdebugcli全局可执行文件
ewfexportcli全局可执行文件
ewfinfocli全局可执行文件
ewfmountcli全局可执行文件
ewfrecovercli全局可执行文件
ewfverifycli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-25
管理器版本20140816
管理器更新时间
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/libyal/libewf-legacy

安装元数据

软件包元数据

软件包键brew:libewf
版本20140816
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/libewf
主页https://github.com/libyal/libewf
仓库https://github.com/libyal/libewf
上游文档https://github.com/libyal/libewf#readme
许可证LGPL-3.0-or-later
源码归档https://github.com/libyal/libewf-legacy/releases/download/20140816/libewf-20140816.tar.gz
依赖openssl@3
构建依赖pkgconf
macOS 提供的库bzip2
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namelibewf
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

ewf-tools 20140816-1+b1

collection of tools for reading and writing EWF files

https://github.com/libyal/libewf-legacy

sudo apt install ewf-tools
  • Section: admin
  • Architecture: amd64
  • Source Package: libewf
  • 4 依赖
  • normalized package name match
  • 匹配方式：Libewf
Debian stable package indexes · deb.debian.org · Debian stable package indexes: ewf-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libewf-dev 20140816-1+b1

support for Expert Witness Compression format (development)

https://github.com/libyal/libewf-legacy

sudo apt install libewf-dev
  • Section: libdevel
  • Architecture: amd64
  • Source Package: libewf
  • 3 依赖
  • normalized package name match
  • 匹配方式：Libewf
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libewf-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

libewf2 20140816-1+b1

library with support for Expert Witness Compression Format

https://github.com/libyal/libewf-legacy

sudo apt install libewf2
  • Section: libs
  • Architecture: amd64
  • Source Package: libewf
  • 2 依赖
  • normalized package name match
  • 匹配方式：Libewf
Debian stable package indexes · deb.debian.org · Debian stable package indexes: libewf2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

python3-libewf 20140816-1+b1

support for Expert Witness Compression format -- Python 3 bindings

https://github.com/libyal/libewf-legacy

sudo apt install python3-libewf
  • Section: python
  • Architecture: amd64
  • Source Package: libewf
  • 3 依赖
  • normalized package name match
  • 匹配方式：Libewf
Debian stable package indexes · deb.debian.org · Debian stable package indexes: python3-libewf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

libewf

nix profile install nixpkgs#libewf
  • normalized package name match
  • 匹配方式：Libewf
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/li/libewf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

ewf-tools 20140814-1build3

collection of tools for reading and writing EWF files

https://github.com/libyal/libewf-legacy

sudo apt install ewf-tools
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: libewf
  • 4 依赖
  • normalized package name match
  • 匹配方式：Libewf
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: ewf-tools from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libewf-dev 20140814-1build3

support for Expert Witness Compression format (development)

https://github.com/libyal/libewf-legacy

sudo apt install libewf-dev
  • Section: universe/libdevel
  • Architecture: amd64
  • Source Package: libewf
  • 3 依赖
  • normalized package name match
  • 匹配方式：Libewf
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libewf-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

libewf2 20140814-1build3

library with support for Expert Witness Compression Format

https://github.com/libyal/libewf-legacy

sudo apt install libewf2
  • Section: universe/libs
  • Architecture: amd64
  • Source Package: libewf
  • 2 依赖
  • normalized package name match
  • 匹配方式：Libewf
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: libewf2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

python3-libewf 20140814-1build3

support for Expert Witness Compression format -- Python 3 bindings

https://github.com/libyal/libewf-legacy

sudo apt install python3-libewf
  • Section: universe/python
  • Architecture: amd64
  • Source Package: libewf
  • 3 依赖
  • normalized package name match
  • 匹配方式：Libewf
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: python3-libewf from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

libewf 20240506-r0

Library to support the Expert Witness Compression Format

https://libewf.sourceforge.net/

sudo apk add libewf
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libewf
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libewf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libewf from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libewf-dev 20240506-r0

Library to support the Expert Witness Compression Format (development files)

https://libewf.sourceforge.net/

sudo apk add libewf-dev
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libewf
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libewf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libewf-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libewf-doc 20240506-r0

Library to support the Expert Witness Compression Format (documentation)

https://libewf.sourceforge.net/

sudo apk add libewf-doc
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libewf
  • normalized package name match
  • 匹配方式：Libewf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libewf-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

libewf-libs 20240506-r0

Library to support the Expert Witness Compression Format (libraries)

https://libewf.sourceforge.net/

sudo apk add libewf-libs
  • License: LGPL-2.0-or-later
  • Architecture: x86_64
  • Source Package: libewf
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式：Libewf
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: libewf-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

ewftools 20140608-33.fc44

Utilities for the Expert Witness Compression Format (EWF)

http://sourceforge.net/projects/libewf/

sudo dnf install ewftools
  • License: LGPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: libewf
  • 7 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libewf
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: ewftools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libewf 20140608-33.fc44

Library for the Expert Witness Compression Format (EWF)

http://sourceforge.net/projects/libewf/

sudo dnf install libewf
  • License: LGPL-3.0-or-later
  • Category: Unspecified
  • Architecture: i686
  • Source Package: libewf
  • 3 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libewf
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libewf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

libewf-devel 20140608-33.fc44

Development files for libewf

http://sourceforge.net/projects/libewf/

sudo dnf install libewf-devel
  • License: LGPL-3.0-or-later
  • Category: Unspecified
  • Architecture: i686
  • Source Package: libewf
  • 5 依赖
  • 2 提供
  • normalized package name match
  • 匹配方式：Libewf
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: libewf-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

相关工具

  • openssl@3Runtime dependency declared by Homebrew.
  • pkgconfBuild dependency declared by Homebrew.
  • sleuthkitPopular package that depends on this formula.
  • xmountPopular package that depends on this formula.

相同工作流

  • bulk_extractorShares av.db curated category or tags: cli, digital-forensics, security.
  • regipyShares av.db curated category or tags: cli, digital-forensics, security.
  • daqShares av.db curated category or tags: c-library, cli, security.
  • libgcryptShares av.db curated category or tags: c-library, cli, security.
  • libgfshareShares av.db curated category or tags: c-library, cli, security.
  • libjwtShares av.db curated category or tags: c-library, cli, security.

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment