0xnhl

Forensics

/ Update
1 min read
  • File
    The file command is used to identify the type file based on its content rather than file extension.
  • Strings
    This command is used to extract human-readable text from binary files.
    sudo apt install binutils
  • Exiftool
    This command is used to extract, view, and modify metadata of various types of files.
    sudo apt install libimage-exiftool-perl
  • Hexedit
    This command is used to view and modify the raw hexadecimal data of a file.
    This is command is useful when working with corrupted file or investigating file structure.
  • Binwalk
    Scan hidden files and embedded data
  • Steghide
    Extract data within images or audios
Forensics
https://nahil.xyz/vault/defence-and-response/forensics/
Author Nahil Rasheed
Published at June 15, 2025
Copyright CC BY-NC-SA 4.0
Disclaimer This content is provided strictly for educational purposes only.

Blue team

Incident Response