Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20102

General Discussion: File Footer help

$
0
0
A lot of files don't have unique footers or trailers. Some files have an exact length and no footer, others can be padded to a sector/cluster length, and typically padded with zeros. Headers are interesting - I tend to ignore trailers and calculate file lengths by other means. As ketdet89 said, it is totally file dependant, so you need to know and understand the relevant file format/structure.

Viewing all articles
Browse latest Browse all 20102

Trending Articles