lowmanio.co.uk title image

Articles with the tag: file headers

Mini Forensics Challenge Answers: File headers & Footers

Wed, 30 Oct 2013 10:38AM

No comments

Thanks to everyone who emailed me in that they completed or had questions about the mini forensics challenge, I’m glad that someone out there reads this blog ;) Here are the answers below. I used Hex Editor Neo in the screenshots.

Read full article

Mini Forensics Challenge: File headers & Footers

Sun, 17 Feb 2013 06:42PM

With 1 comment

Over the next wee while I am going to set some small forensic challenges for you to have a go at. The idea is that you don’t need expensive forensic software (i.e. EnCase!) to have a go; all of these are doable by hand using a hex/text editor. If you know how to do it manually, then you can explain what happens when EnCase or FTK do their magic and also be able to verify it.

Read full article