by Data-Medics » Wed Jul 05, 2017 5:45 pm
Thanks, I do realize that they are normally jpegs. My question, however, was more general in nature. There's a lot of different scenarios where there are files which will have other files embedded inside that can throw it off. Other times there are files that don't have an ending signature and end up getting recovered with huge size if the next file isn't a recognized type. So being able to have some control over file sizes and when/where it's looking for signatures might be nice. In a few cases where I knew files were all about the same size and had no closing signature, I've actually just used the opening signature with an offset from the end to carve them all out to a specific size.
Is there any documentation on what commands are supported besides the basic starting/ending signature and offset of these? Setting a minimum/maximum size is just one example of things I'd like to be able to do. The more I understand the full potential of this, the more creative I can get on the tough cases.
Thanks, I do realize that they are normally jpegs. My question, however, was more general in nature. There's a lot of different scenarios where there are files which will have other files embedded inside that can throw it off. Other times there are files that don't have an ending signature and end up getting recovered with huge size if the next file isn't a recognized type. So being able to have some control over file sizes and when/where it's looking for signatures might be nice. In a few cases where I knew files were all about the same size and had no closing signature, I've actually just used the opening signature with an offset from the end to carve them all out to a specific size.
Is there any documentation on what commands are supported besides the basic starting/ending signature and offset of these? Setting a minimum/maximum size is just one example of things I'd like to be able to do. The more I understand the full potential of this, the more creative I can get on the tough cases.