{"success":true,"data":{"ext":"cbk","name":"EnCase case file","description":"The EnCase case file (CBK) is a forensic case container format created by Guidance Software and now maintained as part of OpenText Forensic products. The format stores case metadata, examiner notes, and references to evidence collected during digital investigations, and it is used with EnCase forensic analysis workflows and related case management tools. It is generally safe to open, but as with any investigation file, it should be handled carefully to preserve evidentiary integrity.","mime":[],"risk_level":"Safe","signatures":[{"hex":"5F 43 41 53 45 5F","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":["cas"],"usage":{"python":"def is_cbk(file_path: str) -> bool:\n    \"\"\"Check if file is a valid CBK by magic bytes.\"\"\"\n    signature = bytes([0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F])\n    with open(file_path, \"rb\") as f:\n        return f.read(6) == signature","node":"function isCBK(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F]);\n  return buffer.subarray(0, 6).equals(signature);\n}","go":"func IsCBK(data []byte) bool {\n    signature := []byte{0x5F, 0x43, 0x41, 0x53, 0x45, 0x5F}\n    if len(data) < 6 {\n        return false\n    }\n    return bytes.Equal(data[:6], signature)\n}"}}}