0xnhl

Back

Forensics

Created: 1/12/2026 Updated: 1/12/2026
#cybersec#grc
  • File
    The file command is used to identify the type file based on its content rather than file extension.
  • Strings
    This command is used to extract human-readable text from binary files.
    sudo apt install binutils
  • Exiftool
    This command is used to extract, view, and modify metadata of various types of files.
    sudo apt install libimage-exiftool-perl
  • Hexedit
    This command is used to view and modify the raw hexadecimal data of a file.
    This is command is useful when working with corrupted file or investigating file structure.
  • Binwalk
    Scan hidden files and embedded data
  • Steghide
    Extract data within images or audios