Graphic Arts Forensics

I was handed a DVD by the editor of a magazine I worked for. He had received it from someone who loaded many files on it and he needed the images extracted.

There were many different file formats, including many that were not apparent by looking at the directory. The files with extensions of .JPG, .TIF, .EPS were obviously images. He wanted everything saved as .JPG, so the .EPS and .TIF images I simply converted in Adobe Photoshop.

But, what about the files that were listed as “Unix Executable File”? That is where I was able to change hats from graphic design production manager to computer forensics guy.

Earning a Master’s in Computer Forensics from Utica College prepared me for this task perfectly. I knew exactly what to do and I did.

Graphic Arts Forensics in Action

Below are the steps I took to determine the file type and how I converted to the format that was required.

The files show up in the Mac’s Finder as a black box, with no indication of what it is.

I opened the file in a hex editor. I used Online Hex Editor to perform this function.

By copying, or noting, the hex values at the beginning of the file I was able to search Gary Kessler’s excellent file format website to find out what kind of file it is. Simply ctl/cmd-F and the hex string will show up with an explanation of what file type it is.

Once identified, change the extension in the Finder to match. In this case, it was an .EPS.

Save the file with the new extension. Don’t let the computer scare you with its scary warnings.

Since this .EPS file can be opened with an image editor, I right-clicked and chose Adobe Photoshop to perform this function.

Once opened in Photoshop, it is revealed to be, uhhh, a tadpole, I guess.

I then saved the image as a .JPG, as requested.

Another mystery file turned out not to be an image at all. This example was an old QuarkXPress file.

Kessler’s file format guide confirmed that. Although it is possible to convert many QuarkXPress files to InDesign using Markzware’s QX2ID plug-in, this wasn’t necessary, but if needed, I’ll do that, too.

Hope this helps.

Jeff Macharyas is the Director of Communications and Marketing at Rappahannock Community College in the Northern Neck region of Virginia. He is a writer, graphic designer and communications director who has worked in publishing, higher education and project management for many years. He has been the art director for Quick Printing, The American Spectator, the USO’s OnPatrol, Today’s Campus, and other publications as well as a telephone pole design engineer contractor. Jeff is certified in Google Analytics and holds a Technician Class Amateur Radio license: K2JPM. He is also a certified fencing instructor.

Jeff earned his AS from Indian River Community College, his BS in Communications from Florida State University, a miniMBA in Social Media Marketing from Rutgers University and a Master’s in Cybersecurity and Computer Forensics from Utica College. Jeff’s capstone was “The Forensic and Malicious Uses of Adobe Software.” It was at Utica College that Jeff developed an interest in open source technology.

For more on graphic arts forensics, check out the Capstone Thesis: The Malicious and Forensic Uses of Adobe Software.