Difference between revisions of "Footer"

From ForensicsWiki
Jump to: navigation, search
(Created page with "File footer is a data structure at or very near the end of the file. Some file formats have well-defined footers, easily identified by signatures or other methods. Other fil...")
 
 
Line 3: Line 3:
 
Some file formats have well-defined footers, easily identified by signatures or other methods. Other file formats do not have any identifiable footers, but just have their data end.
 
Some file formats have well-defined footers, easily identified by signatures or other methods. Other file formats do not have any identifiable footers, but just have their data end.
  
File footers are useful in [[file carving]], where they are used to identify the end of file, and in validation during or after data recovery.
+
File footers are useful in [[File_Carving|file carving]], where they are used to identify the end of file, and in validation during or after data recovery.

Latest revision as of 13:24, 4 December 2017

File footer is a data structure at or very near the end of the file.

Some file formats have well-defined footers, easily identified by signatures or other methods. Other file formats do not have any identifiable footers, but just have their data end.

File footers are useful in file carving, where they are used to identify the end of file, and in validation during or after data recovery.