{"success":true,"data":{"ext":"ex01","name":"EX01","description":"EX01 is a forensic disk image format developed by Guidance Software, now maintained by OpenText as part of EnCase. It is used to preserve and analyze digital evidence from hard drives, removable media, and other storage devices in incident response and criminal investigations. The format is generally safe to handle, but like other evidence containers it should be examined with trusted forensic tools; EX01 is a successor to earlier E01 evidence files.","mime":[],"risk_level":"Safe","signatures":[{"hex":"45 56 46 32","offset":0,"sources":[{"name":"Wikipedia","url":"https://en.wikipedia.org/wiki/List_of_file_signatures"}]}],"related":["exnn"],"usage":{"python":"def is_ex01(file_path: str) -> bool:\n    \"\"\"Check if file is a valid EX01 by magic bytes.\"\"\"\n    signature = bytes([0x45, 0x56, 0x46, 0x32])\n    with open(file_path, \"rb\") as f:\n        return f.read(4) == signature","node":"function isEX01(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x45, 0x56, 0x46, 0x32]);\n  return buffer.subarray(0, 4).equals(signature);\n}","go":"func IsEX01(data []byte) bool {\n    signature := []byte{0x45, 0x56, 0x46, 0x32}\n    if len(data) < 4 {\n        return false\n    }\n    return bytes.Equal(data[:4], signature)\n}"}}}