File Structure | Digital Forensics

Metadata

  • MFT Record
  • File Header
  • Magic Number

MFT Record

File Header

Magic Number

  • DOCX Files Analysis
  • Core
  • app
  • JPEG files Analysis
  • start with FF D8 bytes.
  • consists of section and the value FF is typically used as a delimiter to indicate the start of a new section.

Metadata Type

  • System metadata
  • Substantive metadata
  • Embedded metadata and External metadata

--

--

--

I have been in the IT industry from a young age, and have been dedicated to security since 2015. My personal skill-set lies in Security detection system.

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

READ/DOWNLOAD# Access 2016 Bible FULL BOOK PDF & F

Solana extension wallet user guide — MathWallet

An experience of breaking the software monolith

A rock monolith surrounded by the sea.

How to include SNS and Kinesis in your e2e tests

Reverse Linked List

Nice Chromium and clumsy memset

746. Min Cost Climbing Stairs

A Guide to Coding Placements

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
Hossein Kamali

Hossein Kamali

I have been in the IT industry from a young age, and have been dedicated to security since 2015. My personal skill-set lies in Security detection system.

More from Medium

National Cyber Drill 2021 : Reverse Engineering challenges writeup

HTTP Request Smuggling Explained

PROTOSTAR WALKTHROUGH STACK-6

HOW TO CHOOSE A SENSOR FOR YOUR TELEMETRY SYSTEM?