Forensic Software: Making a file signature analyser tool

tomb1992 wrote: You can then place these two OSFsig documents into the compare signature section and it will show you that the document has been modified. Ask yourself, what do your really want to do: do you want to see if the file has been changed or if the file signatures differ (i.e. is this a Word 2003 document or a Word 2007 document, and has it been resaved in a later version?) Checking file signatures (md5/sha256) for match/missmatch and detection of modification are two different problems.