Page 1 of 1

RAW RECOVERY by Header Information

Posted: 04.02.10, 01:22
by ZeBong
Hi to all,

i would like to know if is possible in DE to make a raw recovery by header information


I can see the files Header Information in Hex Decimal,

Example

JPEG Images

ff d8

but i dont find any place in DE where i can put or build my own file type.


i would like to know how other users make this.



Regards
Jose

Re: RAW RECOVERY by Header Information

Posted: 05.05.10, 12:56
by zeroalpha
Can't you click on the "Raw Recovery Reference Book" button under the raw recovery mode? It gives a grep menu and you can add your signatures?

Re: RAW RECOVERY by Header Information

Posted: 18.05.10, 16:02
by sempre
Hi to all!
Open a good edithexa remove copy grep to add the raw Recovery Reference Book in DE.
I hope I have contributed...

Re: RAW RECOVERY by Header Information

Posted: 18.05.10, 17:59
by AJ2008
sempre wrote:Hi to all!
Open a good edithexa remove copy grep to add the raw Recovery Reference Book in DE.
I hope I have contributed...


The Grep and the file header from a hex editor are not the same. they are structured differently, GREP (I think) seperates bytes with a '/' while a Hex Editor does not so copying the information exactly will not work.

I think tech support at Acelab should be able to clarify this one.

Re: RAW RECOVERY by Header Information

Posted: 18.05.10, 22:34
by sempre
hi, sorry,
In winhex is function menu edit =>copy block=> GREP HEX

Is correct?

Please opnions...

Thanks!! :mrgreen: