Format
AccessData Custom Content Image
Summary
- Name
- AccessData Custom Content Image
- Identifiers
- PUID: fmt/842
- Format type
- Aggregate
- Description
- The AccessData Custom Content Image (AD1) file format is a file-level disk image format created by AccessData's proprietary forensic software, such as FTK Imager. An AD1 image may span multiple files, with multipart files distinguished by their incrementing file extension, e.g. .ad1, .ad2, .ad3, etc.
- File extensions
-
ad1,ad2,ad3,ad4,ad5 - Source
- Artefactual Systems Inc / Artefactual Systems Inc
Internal signatures
AD1
- Note
- BOF: ADSEGMENTEDFILE. A single AD1 file, or the first part of a multipart AD1 will also contain the string ADLOGICALIMAGE, likely at position 0x0200
Byte sequences
- Min Frag Length
- Absolute from BOF
- Offset
- 0
- Max offset
- 0
- Byte Sequence
41445345474D454E54454446494C45- Endianness
- None
Changelog
-
Added in V84
- Release date
- 21 January 2016
AccessData Custom Content Image: Signature submitted by Artefactual Systems Inc.
AccessData Custom Content Image: Full entry added. Submitted by Artefactual Systems Inc.