The analysis of individual files will be of key importance in many different examinations.
If there are still workflows missing, isn’t it too early to mark it ‘Legacy’?
My leisure interests include cycling, food & drink, astronomy and doing up my 1930s house.
I've also webmastered a few pages for my partner Sarah.
By understanding these files, one can more successfully uncover and exploit any higher order forensic artifacts that may be present within the files.
File analysis can be broken up into two distinct but complementary activities: content identification and metadata extraction.