Call:   (888) 458-3222

 

What is a File Signature?

 

There are thousands of file types, some of which have been standardized. When file types are standardized, a signature (or header) is recognized by the program the file belongs to. For example, if one were to see a .DOC extension, it is expected that a program like Microsoft Word would open this file. One tactic in trying to hide data is to change the 3 letter file extension on a file or to remove the extension altogether.

 

Performing a signature analysis identifies which files may have been altered to hide their true indentity.

 

 

 

 

 

 

 

 

 

 

 

 

 

Return to FAQ

Next Question: What is a hard Drive Clone?

Center for Computer Forensics

21800 Melrose Ave

Suite 1

Southfield, MI 48075

 

info@computer-forensics.net

This website is not intended to provide legal or professional advice. The site is merely a starting point to learn about the topics listed. While we attempt to maintain current, complete and accurate information we accept no responsibility for errors or omissions.