QuestionQ65
Digital EvidenceMichael, a forensic examiner, is performing a forensic analysis of an image file acquired from a suspect’s machine. While reviewing the file with a hex editor, he finds that its hexadecimal value begins with the sequence 89 50 4e. The file seems suspicious, so Michael must identify its type to understand its structure and determine whether it contains malicious content. Given this information, what type of file is Michael examining?
- A BMP
- B PNG
- C JPEG
- D PDF
Community Discussion