Hi All,
I leraning Autopsy 4.15 and now i traying add Custom MIME Types for 2 file types from music programe Ableton (
*.als & *.alp). Most easy part was find mime-types:
.als > application/octet-stream
.alp > application/x-ableton
but to full succees i need signatures:
1. Signature Type: Bytes (Hex) or String ASCII
2. Signature (0x0000 or string)
3. Byte Offset
Do you know how is the best metod to get this information? My gol is finding only files with extensions *.als and *.alp on dd/e01 raw file.
I tray to use:
xxd testujacy.alp | head
00000000: 1f8b 0800 0000 0000 020b 8cba 0558 9ccd .............X..
file -i testujacy.alp
testujacy.alp: application/gzip; charset=binary
https://imgur.com/a/4gyu1CP however on filedesk the information about application type was different:
https://www.filedesc.com/en/file/alp