Join Jungwoo Ryoo for an in-depth discussion in this video Hex editor analysis of a bit-shifted file, part of Learning Computer Forensics.
…Many times, criminals simply shift bits in a file to hide a secret and…to mislead computer forensics investigators.…In this case, to reveal the secret,…all you have to do is to shift the bits back to their original positions.…To do this, you can use a hex editor such as Hex Workshop.…We have a mystery file here called secret.txt.…Let me try to open this using a simple text editor, click on Open.…
I don't know what happened to the original text, but in this case,…my strong suspicion is that the bits in the file have been shifted.…To know whether this is true, I'm going to open this file in Hex Workshop.…I'll first close this file.…Start Hex Workshop.…And go to File.…Choose Open and select secret.txt.…And click on Open.…To shift the bits in the file,…you have to make some changes in the configuration of Hex Workshop.…First of all, go to Options.…Under options, choose Toolbars.…And then select Data Operations and enable it and click on Open.…
As soon as you do that, now you have a button to shift bits to the right or…
- Understanding computer forensics
- Understanding partitioning
- Using a hex editor
- Preparing a target drive
- Acquiring data
- Ensuring data integrity with hashing
- Indexing and searching
- Generating a report
Skill Level Intermediate
Q: Which operating systems support built-in write blocking?
Q: Are there other ways to access deleted files in the usbimage.001 file?
Small Office Networking to Connect, Share, and Printwith Garrick Chow3h 23m Appropriate for all
Heartbleed Tactics for Small IT Shopswith David Gassner16m 39s Beginner
1. Understanding Computer Forensics
2. Preparing for a Computer Forensics Investigation
3. Preserving Data
4. Acquiring Data
5. Analyzing Data
Next steps1m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.