{
  "fileFormatID": 1643,
  "formatName": "AccessData Custom Content Image",
  "version": null,
  "formatDescription": "The AccessData Custom Content Image (AD1) file format is a file-level disk image format created by AccessData's proprietary forensic software, such as FTK Imager. \r\n\r\nAn AD1 image may span multiple files, with multipart files distinguished by their incrementing file extension, e.g. .ad1, .ad2, .ad3, etc.",
  "releaseDate": null,
  "binaryFileFormat": null,
  "formatNote": null,
  "lastUpdatedDate": "23 Dec 2015",
  "formatProvenance": null,
  "formatSourceDate": "23 Dec 2015",
  "formatDisclosure": null,
  "formatEnvironment": null,
  "formatRisk": null,
  "formatAliases": null,
  "formatTypes": "Aggregate",
  "formatFamilies": null,
  "identifiers": [
    {
      "identifierText": "fmt/842",
      "identifierType": "PUID"
    }
  ],
  "internalSignatures": [
    {
      "signatureID": 1201,
      "name": "AD1",
      "note": "BOF: ADSEGMENTEDFILE. A single AD1 file, or the first part of a multipart AD1 will also contain the string ADLOGICALIMAGE, likely at position 0x0200",
      "byteSequences": [
        {
          "positionType": "Absolute from BOF",
          "offset": 0,
          "maxOffset": 0,
          "byteSequence": "41445345474D454E54454446494C45",
          "endianness": null,
          "byteSequenceID": 1476
        }
      ]
    }
  ],
  "externalSignatures": [
    {
      "externalSignature": "ad1",
      "signatureType": "File extension"
    },
    {
      "externalSignature": "ad2",
      "signatureType": "File extension"
    },
    {
      "externalSignature": "ad3",
      "signatureType": "File extension"
    },
    {
      "externalSignature": "ad4",
      "signatureType": "File extension"
    },
    {
      "externalSignature": "ad5",
      "signatureType": "File extension"
    }
  ],
  "relationships": [],
  "submittedBy": [
    195
  ]
}