Author Topic: Additional Pattern?  (Read 9368 times)

zen

  • Newbie
  • *
  • Posts: 1
Additional Pattern?
« on: May 03, 2008, 06:05:50 AM »
Hi, I have been using TrID for some time since I came across this software a few months ago and I must say I really like it a lot. Not sure if I'm correct but TrID does use some form of magic number (i.e. the header byte information in the <FrontBlock>) in helping it to recognize the file type. One suggestion is to add in a <EndBlock> to incorporate some footer information/ pattern which will definitely aid in forensic analysis in situations of concatenated files etc. Lastly, wish to stress again that TrID is a great tool, thanks for the tool!

Mark0

  • Administrator
  • Hero Member
  • *****
  • Posts: 2743
    • Mark0's Home Page
Re: Additional Pattern?
« Reply #1 on: May 03, 2008, 07:36:43 PM »
Hi!

Yes, checking of the ending / final part of files is surely something that will be present on a next version!

Thanks for the feedback,
Bye!