I was looking for file headers to try and carve out data from unallocated space on a drive where the suspect re-installed the OS (Vista HP 32-bit). I was able to find a lot of images using the JPG header and the keyword search has found web history data, but I'm looking for documents.
*.doc
*.wpd
*.txt
*.pdf
And any known headers for web based e-mail. Most likely AOL, Yahoo, Hotmail or Gmail.
TIA
Aron
I was looking …
WHERE? ?
Or, in other words, is your Google broken? 😯
Like
http//
http//
http//
(first results in a two minutes search)
*.txt
You sure you want a file header for .txt files? roll
jaclaz
Have a look at http//
alternatively in a *nix installation have a look at the magic file usually found in /usr/share/misc/magic
Paul
Seriously makes you wonder about the rest of the investigation, when something this basic is asked.
I concur with the WHERE statement.
Also agree with Binary Bod FIRST hit,
http//
Thanks binarybod. Kessler's list exactly what I was looking for.