Text: Overview
This project will provide you with experience in recognizing a variety of file types at the byte level. Deleting, hiding, and renaming files are a few methods used to evade a forensics investigation. Find as many files as you can...
Project Requirements
Write a Python program to carve evidence from a binary file.
- There are no import library restrictions
- Your program must accept a binary file as a command-line argument (test using a binary file in the same folder as your python program)
- Your program must write carved files to a folder titled with your last name
- Your program must write the MD5 hash of each carved file to a file named hashes.txt in the same folder as the carved images
- Your program must output to the screen some basic file information such as file type found, file size, and location offset for each carved file
Recommend you start by carving one file type, then expand your solution to carve various file types. Your solution will be tested using a binary file with primarily jpg, png, and pdf file types.
The following items must be submitted to receive full credit for this project:
1) A document explaining your approach/methodology for this project (.doc, .docx, .txt, .pdf, etc...)
2) Commented code (.py file)