|
File Format Identification
March 2010
Kent Vidrine, The MITRE Corporation
ABSTRACT
Digital forensics examiners acquire large numbers of files as they carry out their
investigations. Effective exploitation of the files found on seized media depends upon
accurate file format identification. However, file format identification is a hard problem.
Existing tools and techniques fail to identify all of the files that an investigator may have
interest in. This paper describes the state of the art in file format identification, existing tools
and evaluations thereof, and some of the new techniques developed for the File Format
Identification MITRE Sponsored Research project.
Additional Search Keywords
n/a
|
