Mark0's Forum

Software => TrID File Identifier => Topic started by: zen on May 03, 2008, 06:05:50 AM

Title: Additional Pattern?
Post by: zen on May 03, 2008, 06:05:50 AM

Hi, I have been using TrID for some time since I came across this software a few months ago and I must say I really like it a lot. Not sure if I'm correct but TrID does use some form of magic number (i.e. the header byte information in the <FrontBlock>) in helping it to recognize the file type. One suggestion is to add in a <EndBlock> to incorporate some footer information/ pattern which will definitely aid in forensic analysis in situations of concatenated files etc. Lastly, wish to stress again that TrID is a great tool, thanks for the tool!

Title: Re: Additional Pattern?
Post by: Mark0 on May 03, 2008, 07:36:43 PM

Hi!

Yes, checking of the ending / final part of files is surely something that will be present on a next version!

Thanks for the feedback,
Bye!