Raw data is at the heart of data forensics. Hex viewing is essential, so it’s important to have a good hex viewer. Arbitrary data selections can be hashed, exported, logged, etc. SMART’s raw data viewer can recognize certain data structures automatically. The screenshot above shows the interpretation of a FAT directory entry. Filesystem study extends … Continue reading SMART Data