hi All,
I am a Forensic Examiner. currently I am analyzing JPG images in a mobile through Paraban, Xways and Encase software but I can't get sufficient result due to some image headers have been damaged.
can anyone help me to know any different software ?
Thank you
Well in most applications, you can add custom signatures. What you have to do is see if in the "damaged" headers, you still find something constant across all the files you want to carve.
If you don't have any constant header, then it's going to be difficult to carve anything…
X-Ways and EnCase offer a file-signature search which should recognize it!
Another possibility is scalpel, former foremost under linux. They also look for picture headers e. g. in an image or in unallocated clusters.
if nothing else works you can try to overwrite the damaged header with a header from a picture which works. but work on a copy of the evidence!
Good luck
Hi,
Yeah sure we have to work with copy of evidence images or write blocker, meantime header got damaged completely.
I need to investigate only where the source (blutooth or mobile camara or internet) is…
Thank you
Stupid question time… how do you know that they are pictures and the file information is correct?
If you're sure that they are pictures you could have a go at reparing the files manually.
what "reparing"
Stupid question time… how do you know that they are pictures and the file information is correct?
If you're sure that they are pictures you could have a go at reparing the files manually.
What brand of phone is it?
Some brands (Samsung I believe) use an unusual header that makes it hard to carve.