Forensics & Binary
File Tree Binary Inspector
Inspect binary data with File Tree and review the recovered details. Add the content, choose the checks, and review the reported details.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
File Tree Binary Inspector performs file-tree inspection on supplied binary or media data. The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to File Tree Binary Inspector's selected byte or media interpretation.
The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to File Tree Binary Inspector's selected byte or media interpretation. This result runs in the browser for this catalog category. Processing runs in the browser.
Binary inspection reads selected structure fields; it does not establish authenticity, intent, or safety.
Instructions
- Provide file or files for this tool.
- Use a public fixture first. This applies to File Tree Binary Inspector.
- Record the input format and offset basis with each observation. This applies to File Tree Binary Inspector.
- Validate important fields with an independent parser before reporting them. This applies to File Tree Binary Inspector.
Example
Input: A small public ELF, plist, or binary fixture accepted by the operation. Operation: File Tree Binary Inspector.
Settings: File Tree Binary Inspector: Provide the supported file or structured value. Select the input format and architecture or offset option shown. Keep the original file unchanged while inspecting a copy.
Result: The operation returns parsed fields, file-tree entries, offsets, permissions, or binary structure details. This result is specific to File Tree Binary Inspector's selected byte or media interpretation.
Limits
- File Tree Binary Inspector: Parsers can reject malformed, truncated, or unsupported variants.
- File Tree Binary Inspector: Reported fields do not prove file provenance or runtime behavior.
- File Tree Binary Inspector: Inspection does not execute or safely sandbox embedded code.