Forensics & Binary
nth bytes for Take Binary Inspector
Inspect binary data with Take nth bytes and review the recovered details. Add the content, choose the checks, and review the reported details.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
nth bytes for Take Binary Inspector performs periodic byte selection on supplied binary or media data. It keeps one byte at each stride position, unlike a contiguous slice. The fixture selects offsets 1, 3, and 5.
It keeps one byte at each stride position, unlike a contiguous slice. The fixture selects offsets 1, 3, and 5. This result runs in the browser for this catalog category. Processing runs in the browser.
Byte selection changes or displays offsets; it does not interpret, authenticate, or preserve forensic provenance.
Instructions
- Provide file or files for this tool.
- Use the stride to separate regularly interleaved byte channels. This applies to nth bytes for Take Binary Inspector.
- Enable Apply to each line to retain LF separators and restart selection after each line. This applies to nth bytes for Take Binary Inspector.
Example
Input: Input bytes for ABCDEF, Take every 2, Starting at 1, Apply to each line disabled; output is BDF.
Settings: nth bytes for Take Binary Inspector: Take every must be a positive integer stride. Starting at must be a nonnegative integer byte offset.
Result: It keeps one byte at each stride position, unlike a contiguous slice. The fixture selects offsets 1, 3, and 5.
Limits
- nth bytes for Take Binary Inspector: Discarded bytes do not appear in the result and cannot be reconstructed from it alone.
- nth bytes for Take Binary Inspector: Byte selection does not preserve multi-byte text characters automatically.