# 使用 Homebrew, apk, dnf, MacPorts, Nix, pacman, apt, zypper 安装 libewf 查看 libewf 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:libewf ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install libewf ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install libewf ``` 证据: MacPorts ports tree: security/libewf/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add libewf ``` 证据: Alpine Linux edge package indexes: libewf from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install libewf ``` 证据: Fedora Rawhide package metadata: libewf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#libewf ``` 证据: nixpkgs package indexes: pkgs/by-name/li/libewf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S libewf ``` 证据: Arch Linux sync databases: libewf from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - Debian apt (92%): ```sh sudo apt install ewf-tools ``` 证据: Debian stable package indexes: ewf-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - zypper (92%): ```sh sudo zypper install libewf-devel ``` 证据: openSUSE Tumbleweed package metadata: libewf-devel from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## 软件包事实 - **软件包键:** brew:libewf - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 20140816 - **来源摘要:** Library for support of the Expert Witness Compression Format - **主页:** - **仓库:** - **许可证:** LGPL-3.0-or-later - **源码归档:** - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - ewfacquire (cli) - ewfacquirestream (cli) - ewfdebug (cli) - ewfexport (cli) - ewfinfo (cli) - ewfmount (cli) - ewfrecover (cli) - ewfverify (cli) - ewfacquire (别名) - ewfacquirestream (别名) - ewfdebug (别名) - ewfexport (别名) - ewfinfo (别名) - ewfmount (别名) - ewfrecover (别名) - ewfverify (别名) ## 依赖 - openssl@3 ## 构建依赖 - pkgconf ## macOS 提供的库 - bzip2 ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 20140816 - 本地数据: OK - 上游仓库: https://github.com/libyal/libewf-legacy - 信息: No package-manager update timestamp was available. - 信息: No cached GitHub release or tag data was available. ## 项目历史与用法 libewf is the libyal library and tool suite for reading, writing, acquiring, verifying, exporting, and mounting Expert Witness Compression Format evidence files. Its package-manager identity is tied to digital forensics because EWF/E01 images are common interchange artifacts between acquisition tools, forensic suites, and open-source analysis workflows. ### 项目历史 Joachim Metz began documenting the EWF file format in March 2006, with libewf's legacy ChangeLog recording release-preparation work in April 2006. The project grew alongside a public working specification for the format, covering SMART, EnCase E01, logical evidence files, and later EWF2 variants. The libyal repositories split the actively experimental libewf tree from a stable legacy tree. Homebrew's curation points at the legacy repository, while the project documentation and README describe the broader libewf effort. ### 采用历史 EWF became important because forensic images produced by EnCase, FTK Imager, SMART, and related tools needed open readers and converters. libewf gave Unix package ecosystems a reusable C library plus tools such as ewfacquire, ewfinfo, ewfexport, ewfmount, and ewfverify. Distribution packages under names such as libewf, ewf-tools, and ewftools made E01 handling available outside proprietary forensic workstations. ### 使用方式 Package users commonly install libewf for command-line acquisition and conversion, for mounting or inspecting EWF images, or as a dependency of forensic applications that need E01/S01/L01 support. ### 为什么软件包爱好者会关心 libewf is package-nerd useful because it turns a proprietary-forensics file family into a normal Unix library and set of small tools. It also carries one of the clearest public format documents for EWF, making it useful to preservation, incident response, and forensic packaging work. ### 时间线 - 2006-03: Initial public EWF specification revisions for the libewf project. - 2006-04: Legacy ChangeLog records first-release preparation and tool renames such as ewfcat to ewfexport and ewfmd5sum to ewfverify. - 2014: Legacy ChangeLog records stabilization work and synchronization with the experimental libewf tree. - 2026: The EWF specification document records maintenance through 2006-2026. ### Related projects - Related projects include the libyal family of forensic libraries, The Sleuth Kit integrations, EnCase, FTK Imager, and forensic package sets that ship ewf-tools. ### 来源 - - - - ## 安全说明 library-like package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - library-like package without higher-risk signals ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** libewf - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Debian apt - ewf-tools - 20140816-1+b1: normalized package name match | Debian stable package indexes: ewf-tools from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | collection of tools for reading and writing EWF files | https://github.com/libyal/libewf-legacy - Debian apt - libewf-dev - 20140816-1+b1: normalized package name match | Debian stable package indexes: libewf-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | support for Expert Witness Compression format (development) | https://github.com/libyal/libewf-legacy - Debian apt - libewf2 - 20140816-1+b1: normalized package name match | Debian stable package indexes: libewf2 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | library with support for Expert Witness Compression Format | https://github.com/libyal/libewf-legacy - Debian apt - python3-libewf - 20140816-1+b1: normalized package name match | Debian stable package indexes: python3-libewf from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | support for Expert Witness Compression format -- Python 3 bindings | https://github.com/libyal/libewf-legacy - Nix - libewf: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libewf/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - ewf-tools - 20140814-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: ewf-tools from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | collection of tools for reading and writing EWF files | https://github.com/libyal/libewf-legacy - Ubuntu apt - libewf-dev - 20140814-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: libewf-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | support for Expert Witness Compression format (development) | https://github.com/libyal/libewf-legacy - Ubuntu apt - libewf2 - 20140814-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: libewf2 from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | library with support for Expert Witness Compression Format | https://github.com/libyal/libewf-legacy - Ubuntu apt - python3-libewf - 20140814-1build3: normalized package name match | Ubuntu 24.04 LTS package indexes: python3-libewf from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | support for Expert Witness Compression format -- Python 3 bindings | https://github.com/libyal/libewf-legacy - apk - libewf - 20240506-r0: normalized package name match | Alpine Linux edge package indexes: libewf from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library to support the Expert Witness Compression Format | https://libewf.sourceforge.net/ - apk - libewf-dev - 20240506-r0: normalized package name match | Alpine Linux edge package indexes: libewf-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library to support the Expert Witness Compression Format (development files) | https://libewf.sourceforge.net/ - apk - libewf-doc - 20240506-r0: normalized package name match | Alpine Linux edge package indexes: libewf-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library to support the Expert Witness Compression Format (documentation) | https://libewf.sourceforge.net/ - apk - libewf-libs - 20240506-r0: normalized package name match | Alpine Linux edge package indexes: libewf-libs from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library to support the Expert Witness Compression Format (libraries) | https://libewf.sourceforge.net/ - dnf - ewftools - 20140608-35.fc45: normalized package name match | Fedora Rawhide package metadata: ewftools from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Utilities for the Expert Witness Compression Format (EWF) | http://sourceforge.net/projects/libewf/ - dnf - libewf - 20140608-35.fc45: normalized package name match | Fedora Rawhide package metadata: libewf from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Library for the Expert Witness Compression Format (EWF) | http://sourceforge.net/projects/libewf/ - dnf - libewf-devel - 20140608-35.fc45: normalized package name match | Fedora Rawhide package metadata: libewf-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Development files for libewf | http://sourceforge.net/projects/libewf/ ## 相关链接 - [Source-control packages](https://pkg.so/zh-hans/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://pkg.so/zh-hans/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Archive and compression packages](https://pkg.so/zh-hans/archive-compression-tools/) - Matched archive or compression metadata. - [openssl@3](https://pkg.so/zh-hans/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/zh-hans/brew/pkgconf/) - Build dependency declared by Homebrew. - [sleuthkit](https://pkg.so/zh-hans/brew/sleuthkit/) - Popular package that depends on this formula. - [xmount](https://pkg.so/zh-hans/brew/xmount/) - Popular package that depends on this formula. - [bulk_extractor](https://pkg.so/zh-hans/brew/bulk-extractor/) - Shares pkgdb curated category or tags: cli, digital-forensics, security. - [regipy](https://pkg.so/zh-hans/brew/regipy/) - Shares pkgdb curated category or tags: cli, digital-forensics, security. - [nettle](https://pkg.so/zh-hans/brew/nettle/) - Shares pkgdb curated category or tags: c-library, cli, security. - [libgcrypt](https://pkg.so/zh-hans/brew/libgcrypt/) - Shares pkgdb curated category or tags: c-library, cli, security. - [mbedtls](https://pkg.so/zh-hans/brew/mbedtls/) - Shares pkgdb curated category or tags: c-library, cli, security. - [libjwt](https://pkg.so/zh-hans/brew/libjwt/) - Shares pkgdb curated category or tags: c-library, cli, security. - [afflib](https://pkg.so/zh-hans/brew/afflib/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, disk, forensics, format, openssl. ## Combined YAML source View the package source record on GitHub. [combined/libewf.yml](https://github.com/mxcl/pkgdb/blob/main/combined/libewf.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph