Data Recovery and Disk Utilities Forum @R-TT

Unfortunately end rule will not work for braw files. "\x73\x6B\x69\x70" = "[b]skip[/b]", bytes preceding it is size of [b]skip[/b] 'sub-atom' and thus variable. You'll possibly/probably find hundreds of [b]skip[/b] atoms throughout a file. In case I am looking at right now, it is the case.

Are NOT conditions also possible?

So, = \x00\x00\x[b]??[/b]\x73\x6B\x69\x70 AND NOT \x00\x00\x[b]0C[/b]\x73\x6B\x69\x70

I had to use DMDE to make this work: https://youtu.be/ocQ0gguev7c

Hi,
Beautiful Article -> https://www.r-studio.com/creating-custom-file-type-r-studio.html

PS : i might nail it now ;-)

[quote=Alt post_id=17097 time=1617985772 user_id=59]
[quote="Amarbir[CDR-Labs]" post_id=17096 time=1617938990 user_id=3767]
Now help me with the process of adding this signature into Rstudio ,I could not understand what to do please
[/quote]
These on-line help pages may help you:
[url=https://www.r-studio.com/Unformat_Help/r-studio_settings.html]R‑Studio Settings[/url] (Main).
[url=https://www.r-studio.com/Unformat_Help/discscan.html]Disk Scan[/url].
[/quote]

Well,
You Have Provided Me With a XML And i cannot find a way to import to the dialogue box thats pops up when we plan to add custom signatures ,Can you remote in using Teamviewer or Anydesk and help me Add this

[quote="Amarbir[CDR-Labs]" post_id=17096 time=1617938990 user_id=3767]
Now help me with the process of adding this signature into Rstudio ,I could not understand what to do please
[/quote]
These on-line help pages may help you:
[url=https://www.r-studio.com/Unformat_Help/r-studio_settings.html]R‑Studio Settings[/url] (Main).
[url=https://www.r-studio.com/Unformat_Help/discscan.html]Disk Scan[/url].

Hello,
Thank You i will also provide you more samples if i can get my hands on them and also Red Camera files ,Now help me with the process of adding this signature into Rstudio ,I could not understand what to do please

<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="2.0">
    <FileType id="50003" group="BRAW" description="braw file type 1" features="" extension="braw">
        <Begin combine="AND">
            <Signature>\x00\x00\x00\x08\x77\x69\x64\x65</Signature>
            <Signature offset="11">\xF8\x6D\x64\x61\x74</Signature>
        </Begin>
        <End combine="OR">
            <Signature offset="8" from="end">\x00\x00\x09\x73\x6B\x69\x70\x00</Signature>
        </End>
    </FileType>
</FileTypeList>

<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="2.0">
    <FileType id="50003" group="BRAW" description="braw file type 2" features="" extension="braw">
        <Begin combine="AND">
            <Signature>\x00\x00\x00\x08\x77\x69\x64\x65</Signature>
            <Signature offset="11">\xF8\x6D\x64\x61\x74</Signature>
        </Begin>
        <End combine="OR">
        </End>
    </FileType>
</FileTypeList>

There's a problem I've run into. The files you sent to me have different ends. 5 of them have the same end, the rest 2 files have different ends. So, my solution is the following.
1. First, scan the disk with the following description file:
[code]<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="2.0">
<FileType id="50003" group="BRAW" description="braw file type 1" features="" extension="braw">
<Begin combine="AND">
<Signature>\x00\x00\x00\x08\x77\x69\x64\x65</Signature>
<Signature offset="11">\xF8\x6D\x64\x61\x74</Signature>
</Begin>
<End combine="OR">
<Signature offset="8" from="end">\x00\x00\x09\x73\x6B\x69\x70\x00</Signature>
</End>
</FileType>
</FileTypeList>[/code]
This will find the files with this most popular end.
2. Then scan the disk with the next description file:
[code]<?xml version="1.0" encoding="UTF-8"?>
<FileTypeList version="2.0">
<FileType id="50003" group="BRAW" description="braw file type 2" features="" extension="braw">
<Begin combine="AND">
<Signature>\x00\x00\x00\x08\x77\x69\x64\x65</Signature>
<Signature offset="11">\xF8\x6D\x64\x61\x74</Signature>
</Begin>
<End combine="OR">
</End>
</FileType>
</FileTypeList>[/code]
This will find all braw files, including the braw file type 1 ones, but without clear file ends.
Turn off all file systems on the Scan dialog box and leave only BRAW file types enabled on the Known File Types box.
As I understand, these files are huge, chances are high that they are fragmented, so success isn't guaranteed.

[quote="Amarbir[CDR-Labs]" post_id=17093 time=1617870382 user_id=3767]
Hello,
Let Me Know If You Need More Samples ...
[/quote]

There are enough samples, the problem is that the files are huge and therefore they are difficult to analyze.

[quote=Alt post_id=17092 time=1617823921 user_id=59]
[quote="Amarbir[CDR-Labs]" post_id=17091 time=1617816547 user_id=3767]
Hello,
Any Update in This Regard Please ? .
[/quote]
Not yet. I'm working on that.
[/quote]

Hello,
Let Me Know If You Need More Samples ...

[quote="Amarbir[CDR-Labs]" post_id=17091 time=1617816547 user_id=3767]
Hello,
Any Update in This Regard Please ? .
[/quote]
Not yet. I'm working on that.

Hello,
Any Update in This Regard Please ? .