drop a disk image or binary file · detect deliberate partial overwrite of file headers to prevent carving · identify files with valid bodies but corrupted magic bytes · surface anti-carving techniques · runs locally
disk image
drop image or binary
or click
scans footers without matching headers · PE/JPEG/ZIP/PDF/PNG patterns
drop disk image (.img .dd .raw) or binary