Overview

• A file's 'type' indicates the type of application with which it's associated. In this series we discuss file types and demonstrate how to automate the process of identifying mismatched file types/extensions.

Video

• File signatures (Right click and save as)

Textbook

• Nelson, multiple chapters including Chapter 11

Additional resources

• P. Craiger, Computer forensics methods and procedures. In H Bigdoli, (Ed), Handbook of Information Security, New York, John Wiley, Vol 2., pp. 736-755, 2006.
• Signature analysis (web)
• Signature analysis (video)