libewf
Collection of tools for reading and writing EWF files
forensic-imaging-toolsBlue Team
Toolforensic-imaging-toolsblueLinuxKali LinuxPlatforms: Linux · Last verified September 6, 2026
Libewf is a library with support for reading and writing the Expert Witness Compression Format (EWF). This library allows you to read media information of EWF files in the SMART (EWF-S01) format and the EnCase (EWF-E01) format. It supports files created by EnCase 1 to 6, linen and FTK Imager. The libewf is useful for forensics investigations.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
See the official Kali tool page and upstream homepage linked above for installation and usage details.
