How to get the head...
 
Notifications
Clear all

How to get the header and footer for a .bak file

5 Posts
3 Users
0 Likes
1,350 Views
(@Anonymous)
Posts: 0
Guest
Topic starter
 

Hi guys

I am using foremost to carve for a .bak file. I would like to know how I can get the header and footer to add to foremost.conf as it does appear with with the standard configuration.

Thanks
Kitty

 
Posted : 09/12/2017 10:23 am
(@mscotgrove)
Posts: 938
Prominent Member
 

BAK files can come from almost anywhere. Typically they are a copy of the original file before modifications have been made. There is no standard .BAK format

You will need to set up a signature for the original file type, eg .doc for an old stye Word document

 
Posted : 09/12/2017 11:44 am
(@Anonymous)
Posts: 0
Guest
Topic starter
 

BAK files can come from almost anywhere. Typically they are a copy of the original file before modifications have been made. There is no standard .BAK format

You will need to set up a signature for the original file type, eg .doc for an old stye Word document

Actually MS Sql backups are stored in .bak format.
Managed to find some information Here .
Gong to try is now.

 
Posted : 09/12/2017 12:07 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Actually MS Sql backups are stored in .bak format.
Managed to find some information Here .
Gong to try is now.

Sure, and as well every other program will use .bak as file extension for a BAcKup copy of its own format files, no matter which file format is it.

You found some relevant info, but you didn't follow through it
http//file-extension.net/seeker/file_extension_bak

TriD correctly analyzes files INDEPENDENTLY from the file extension, looking for recognizable patterns (header or footer).

If you use it on a (very common since the program defaults to create a .bak file when working on a drawing) Autocad .bak file TriD will recognize it as what it is, a .dwg file with the changed extension to ,bak.

Try using Trid on your UNKNOWN file with .bak extension and hopefully it will give you an identification.

jaclaz

 
Posted : 09/12/2017 1:33 pm
(@Anonymous)
Posts: 0
Guest
Topic starter
 

Sure, and as well every other program will use .bak as file extension for a BAcKup copy of its own format files, no matter which file format is it.

You found some relevant info, but you didn't follow through it
http//file-extension.net/seeker/file_extension_bak

TriD correctly analyzes files INDEPENDENTLY from the file extension, looking for recognizable patterns (header or footer).

If you use it on a (very common since the program defaults to create a .bak file when working on a drawing) Autocad .bak file TriD will recognize it as what it is, a .dwg file with the changed extension to ,bak.

Try using Trid on your UNKNOWN file with .bak extension and hopefully it will give you an identification.

jaclaz

Thanks, trying it out now.

 
Posted : 09/12/2017 7:07 pm
Share: