RAW RECOVERY by Header Information

[ZeBong]

Hi to all,

i would like to know if is possible in DE to make a raw recovery by header information


I can see the files Header Information in Hex Decimal,

Example

JPEG Images

ff d8

but i dont find any place in DE where i can put or build my own file type.


i would like to know how other users make this.



Regards
Jose

[zeroalpha]

Can't you click on the "Raw Recovery Reference Book" button under the raw recovery mode? It gives a grep menu and you can add your signatures?

[sempre]

Hi to all!
Open a good edithexa remove copy grep to add the raw Recovery Reference Book in DE.
I hope I have contributed...

[AJ2008]

Hi to all!
Open a good edithexa remove copy grep to add the raw Recovery Reference Book in DE.
I hope I have contributed...

The Grep and the file header from a hex editor are not the same. they are structured differently, GREP (I think) seperates bytes with a '/' while a Hex Editor does not so copying the information exactly will not work.

I think tech support at Acelab should be able to clarify this one.

[sempre]

hi, sorry,
In winhex is function menu edit =>copy block=> GREP HEX

Is correct?

Please opnions...

Thanks!!