Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20102

General Discussion: HEX SEARCH

$
0
0
athulin wrote: You probably can't -- at least not easily. Ordinary search tools (you haven't said what tools you *are* using), tend to have been designed for more limited jobs, and often have a limit at 512 bytes (hard disk sector size) or 4096 (common cluster size) or something like that. Those limits are not always well documented, so you need to validate your tool before using it with such outsized search patterns. I cannot see this being a problem, even if fragmentation is considered, lest we forget the good Lord invented hashing... specially if the 1MB is cluster aligned. I second writing a code. Developing such code should take you no more than a few hours even for a beginner. It will be slow but will work.

Viewing all articles
Browse latest Browse all 20102

Trending Articles