{"success":true,"data":{"ext":"lnn","name":"Logical File Evidence Format","description":"Logical File Evidence Format (L01) is a segment type within the Expert Witness Compression Format used by Guidance Software’s EnCase forensic suite, originally developed by Guidance Software and later maintained by OpenText. It is used to store logical copies of files and folders for digital forensics, evidence preservation, and analysis in investigation workflows. The format is primarily historical and is considered a legacy evidence container; as with any forensic image, it should be handled carefully to preserve chain of custody.","mime":[],"risk_level":"Safe","signatures":[{"hex":"4C 56 46 09 0D 0A FF 00","offset":0,"sources":[{"name":"Gary Kessler","url":"https://www.garykessler.net/library/file_sigs_GCK_latest.html"}]}],"related":[],"usage":{"python":"def is_lnn(file_path: str) -> bool:\n    \"\"\"Check if file is a valid LNN by magic bytes.\"\"\"\n    signature = bytes([0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00])\n    with open(file_path, \"rb\") as f:\n        return f.read(8) == signature","node":"function isLNN(buffer: Buffer): boolean {\n  const signature = Buffer.from([0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00]);\n  return buffer.subarray(0, 8).equals(signature);\n}","go":"func IsLNN(data []byte) bool {\n    signature := []byte{0x4C, 0x56, 0x46, 0x09, 0x0D, 0x0A, 0xFF, 0x00}\n    if len(data) < 8 {\n        return false\n    }\n    return bytes.Equal(data[:8], signature)\n}"}}}