Additional Pattern?

Started by zen, May 03, 2008, 06:05:50 AM

Previous topic - Next topic

zen

Hi, I have been using TrID for some time since I came across this software a few months ago and I must say I really like it a lot. Not sure if I'm correct but TrID does use some form of magic number (i.e. the header byte information in the <FrontBlock>) in helping it to recognize the file type. One suggestion is to add in a <EndBlock> to incorporate some footer information/ pattern which will definitely aid in forensic analysis in situations of concatenated files etc. Lastly, wish to stress again that TrID is a great tool, thanks for the tool!

Mark0

Hi!

Yes, checking of the ending / final part of files is surely something that will be present on a next version!

Thanks for the feedback,
Bye!