Data Loss Prevention

 View Only
  • 1.  special custom script

    Trusted Advisor
    Posted Apr 12, 2012 04:21 AM

    Hi,

     

     Is it possible to do a custom script which will start analysis from the end of binary file ? For excample, I would like to check last two bytes of a binary file. I did lot of script using magic byte detection, but in some type of file you can also use last bytes to ensure no one is using "basic" steganography.

     Best regards



  • 2.  RE: special custom script
    Best Answer

    Trusted Advisor
    Posted May 18, 2012 08:44 AM

    I found a way to do it using lenght of data object (possible till DLP v11) and checking last four bytes of binary file.

     unfortunately it is not very efficient as lot of file are not compliant with RFC on last byte of binary file (even for std picture format).