Where Data meets the Eye
How you visualize Binary Data and instantly see what's relevant
Some years ago Greg Conti gave an inspiring talk at Black Hat conference about Visual Forensic Analysis and Reverse Engineering of Binary Data. Based on his ideas and software prototype FileGlance was created.
FileGlance runs on Linux, Mac, and Windows.
"FileGlance reveals what matters in binary files."
This is for you if...
Views you'll love!
A visual element for each feature, some text to explain the benefits plus the sheer number of features make this an effective selling point:
Entropy View
Visualize the randomness of a file to find instantly compressed or encrypted parts.
Image View
Find uncompressed images in different formats quickly hidden within files.
Histogram
Important file characteristics in one diagram. See for each byte value how often it occurs.
Digram View
Combinations of byte values graphically displayed - reveals certain file characteristics
Dot Plot
Repeating byte values presented visually. See what the hex editor hides in plain sight.
Byte Presence View
Which byte values are present in a file?
Hash Values
Let FileGlance compute the most important hash values and copy to clipboard with one click.
Entropy
The entropy value of the whole file data allows a quick assessment of the contents.
Hex Viewer
The raw bits and bytes connected to the graphical visualizations. All the details in the global context.
What's the problem FileGlance is solving?
Hex editors have proven to be useful tools for decades. And they'll probably always be the app to choose when the raw bits and bytes need to be inspected.
However, not only storage sizes grow larger but also file sizes. And while it is reasonable to inspect a 10 kb file on byte level it is almost impossible for 10 MB or 1 GB.
This is where applications like FileGlance come into play. It allows you to scan quickly through a file, identify different sections and look at the data from different angles.
Quick Assessments
Alphabet in use. Both histogram and Dot Plot view tell you effortlessly of what bytes the data consists of.
Use of encryption. The entropy view shows you exactly where sections of encrypted or compressed data are located within a file. Also byte presence view and others show characteristic patterns.
Images. By adjusting the line width pixels align and full pictures become visible. This works on bit or byte level and also for multiple bytes per pixel.
Fixed length structures. Not only pixels but also patterns of similar data in structures align visually when you modify the line width in the image view. This is a much faster approach than looking at the raw bytes.
File format exploration. All the views come in handy when you investigate files with unknown format. Entropy and byte presence view let you distinguish sections and what type of data you're looking at.
Dot Plot of an MP3 File
There are three sections of the file identifiable. The first one consists the MP3 header and meta data.
The second section is apparently compressed while the third section is filled with equal bytes (0xFF in this case).
Digram View of a Log File
This digram view shows a pattern typical for ASCII encoded files.
Easily identifiable are the byte values of uppercase and lowercase characters.
DotPlot of Repeated Values
Sequences of equal values show up as horizontal lines or squares.
DotPlot of Ascending Values
Ascending or descending values are represented by diagonal lines.
Notice how short it takes to get this information.
What is FileGlance?
FileGlance is an application that visualizes binary files. With a single license you can run it on up to three machines - be it Window, Linux or Mac. Even without license it serves as an incredibly fast hex editor and computes useful hash values.
Download and test it for one week before you decide whether you buy or not.
Try all Features for 7 DAYS!
Download and use FileGlance for 7 days without limit. After the trial period you can still use hex editor, hash values and the other features of the main window for free.
Only if you want to continue using the visual file representations you purchase FileGlance.
FAQ
Here are answers to some frequently asked questions:
Is there also a 32 Bit Version?
Why is FileGlance not free (as in beer)?
Can I use one license on different OS?
What is the maximum file size FileGlance can open?
Get your copy of FileGlance now!
Life is too short for finding patterns in a hex editor that can be revealed in seconds with a proper visualization.
© 2018 Synalysis. All rights Reserved | Disclaimer