MITRE D3FENDdefensive technique
D3-FMBV File Magic Byte Verification
- Tactic
- Isolate
Definition
Utilizing the magic number to verify the file
How it works
How it works
Many file formats use magic numbers to identify a file format or protocol. Verifying that the magic number matches the expected value of its declared format is a simple way of verifying the file format.
Related
Child of · MITRE D3FEND (1)
- D3-FMVV File Metadata Value Verification defensive technique
References
- https://www.sciencedirect.com/science/article/pii/S1742287607000369?viewFullText=true#sec4 Carving Contiguous and Fragmented Files with Fast Object Validation
- https://pure.uva.nl/ws/files/1739225/132135_thesis.pdf Gathering Evidence: Model-Driven Software Engineering in Automated Digital Forensics