DFF Installation in Windows

The installation of DFF on Microsoft Windows XP/Vista/7 32 and 64 bits
There are two packages for windows :

• The first one contains all required dependencies (Python 2.7 and PyQt). It can be downloaded from here (about 52MiB big).

• The second one (9MiB big), which can be downloaded from here, does not contain Python and PyQt, so you will need to install the two following dependencies before launching DFF installation :
  • Python 2.7
  • PyQt 

  The form on DFF download page is OPTIONAL . If you do not wish to send any information, just leave it empty and directly click on the Download button.  

 Install DFF

• Once you have download one of the installer, you can run it by double-clicking on it. The following window will be opened : 

 

Click on the Next button (or Cancel if you wish to cancel the installation).

• On the next screen, you will be asked to accept the license terms.

 

If you disagree, click on Cancel to quit the installation, otherwise click on I agree.

• Then select in which directory you want to install DFF (by default in C:\Program files\DFF)

Click on the Browse... button if you wish to change the installation directory (optional). Once you are done, click on the Next button.

• You will be asked for the name of the shortcut you want to create in your Start -> programs menu (by default, Digital Forensics Framework).

 

You can rename it or chose an existing directory in the list. You can also check the Do not create shortcuts check-box to avoid creating shortcuts on your desktop.

• Click on the Install button.

If you have chosen the installer with Python dependencies, read the following part Install Python and PyQT. Otherwise you can directly switch to the finish install part.

Install Python and PyQt 

• You will be asked if you want to install Python.

  

Python 2.7 AND PyQt 4.8 (or superior) are required to run DFF, so click Yes if do not have already installed those dependencies. Otherwise you can click No and directly go to the finish install part.  

Click Yes on the pop-up, and then Next of the wizard.

• PyQt wizard will be launched. 

 

Click next.

• One more time, you will be asked to accept the license terms of PyQT. 

Click on I Agree if you agree with those terms. Otherwise, click Cancel to quit the installation.

• Select which PyQt components you wish to install. 

 

 Note : Even though every components are selected on the screen-shot, the only ones which are required are Extensions modules (checked by default) and Qt runtime. Among the others, select the ones you are interested in. 

Then you can click next.

• You will have to select in which directory you want ton install Python (C:\Python27 by default).

 

If you wish to change this directory, click on the Browse... button and select the new location. Once you are done you can click on Install.

• Once this installation is finished, you can click on Finish.

 

Then you can chose to install the Microsoft DLL dependencies (required to run DFF).

Click on Yes if you want to install them. Wait during the installation.

Finish install DFF

Once the installation is finished, you can click on the Finish button.

You can now start using DFF (Digital Forensic Framework)

Install DFF on Gentoo Without ebuild

In order to compile and run DFF you will need to install some dependencies :

• CMake >= 2.8
• Swig >= 1.38
• PyQt4 >= 4.6
• optional :
• fuse
• libbfio separate installation required to have libpff working
• libpff without shipped libbfio, install it after libbfio
• libewf
• afflib

Use the following commands to get all these dependencies :

#> emerge -av cmake

#> echo ">=dev-lang/swig-1.3.38" >> /etc/portage/package.keywords

#> emerge -av swig

#> echo ">=dev-python/PyQt4-4.6" >> /etc/portage/package.keywords

#> emerge -av PyQt4

#> emerge -av app-forensics/libewf

#> emerge -av sys-fs/fuse

Install DFF on Gentoo

Install DFF on Gentoo Using ebuild
You can use layman to add the pentoo overlay which contain the ebuild, thanks to ikelos and pentoo team providing it ! Have a look at their trac for latest DFF version supported and changes comments.
If you don't have layman installed:

#> emerge layman

#> echo "source /var/lib/layman/make.conf" >> /etc/make.conf

Then add the pentoo overlay :

#> layman -a pentoo

Then you can emerge DFF and it's dependencies. DFF ebuild is masked for some architecture so, for example on x86 don't forget to unmask :

ACCEPT_KEYWORDS="~x86" emerge dff

or on an amd64 compatible architecture :

ACCEPT_KEYWORDS="~amd64" emerge dff

Debian-based distribution

Debian, Ubuntu, Kbuntu, etc.

There are two different packages for Debian, depending on your architecture : 32 or 64 bits.

For 32 bits, download dff-1.2.0_i386.deb

For 64 bits, download dff-1.2.0_amd64.deb

If you do not wish to receive news about DFF just leave the form empty and directly click on the Download button.

You can install DFF using the command dpkg in a shell; or use the synaptic graphical (GUI) package helper and installer.

To install using synaptic, double click on the .deb package and synaptic will check your system for the required dependencies and install them, if required, prior to installing DFF.

 

To install via the command line (shell) with dpkg, you must first install the required dependencies before installing DFF. To install the dependencies via the command line (shell), use the following command:

#> aptitude -y install python-qscintilla2 python-qt4 python-magic python-qt4-phonon

Now you can use this command to install DFF, depending on your architecture :

#> if [ $(uname -m | grep '64') ]; then dpkg -i dff-1.2.0_amd64.deb; else dpkg -i dff-1.2.0_i386.deb; f