ForensicsWiki will continue to operate as it has before and will not be shutting down. Thank you for your continued support of ForensicsWiki.
Notes Storage Facility (NSF)
The NSF has the following file signature: hexadecimal: 1a 00 (which is often followed by: 00 04 00 00)
NSF defines a ODS (on-disk structure) version.
- 16 (Notes 1.x, 2x)
- 17 (Notes 3.x)
- 20 (Notes 4.x)
- 41 (Notes 5.x)
- 43 (Notes 6, 7 and 8)
- 48 (Notes 8)
- 51 (Notes 8.5)
One significant change in the Record Relocation Vector (RRV) seems to be introduced in format revision 22.
The NSF basically contains Notes.
Notes can use various forms of encryption see: Notes from Support: Notes Encryption - Locks for a Digital World.