Skip to main content

Forensics & Binary

Take bytes Binary Inspector

Inspect binary data with Take bytes and review the recovered details. Add the content, choose the checks, and review the reported details.

Tool workspace

Your input stays in this browser.

Add the required input to continue.

Needs input

Run the tool when your input is ready.

Options

Your result appears here

Inspect binary data with Take bytes and review the recovered details. Add the content, choose the checks, and review the reported details.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Take bytes Binary Inspector performs contiguous byte slicing on supplied binary or media data. It returns one contiguous byte slice, or one slice from each LF-separated line when enabled.

It returns one contiguous byte slice, or one slice from each LF-separated line when enabled. This result runs in the browser for this catalog category. Processing runs in the browser.

Byte selection changes or displays offsets; it does not interpret, authenticate, or preserve forensic provenance.

Instructions

  1. Provide file or files for this tool.
  2. Use Start 1 and Length 3 to reproduce BCD from ABCDEF. This applies to Take bytes Binary Inspector.
  3. Enable Apply to each line only when offsets must restart after each LF byte. This applies to Take bytes Binary Inspector.

Example

Input: Input bytes for ABCDEF, Start 1, Length 3, Apply to each line disabled; output is BCD.

Settings: Take bytes Binary Inspector: Start is a zero-based byte offset, not a character position. Length selects consecutive bytes; negative values use the operation's reverse-range behavior.

Result: It returns one contiguous byte slice, or one slice from each LF-separated line when enabled.

Limits

  • Take bytes Binary Inspector: A slice can split a multi-byte UTF-8 character.
  • Take bytes Binary Inspector: Offsets beyond the available bytes do not recover missing data.