This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
The link for the text: Breaking Encase with FILE0 and Winhex (http://www.safehack.com/Textware/forensic/Anti_Forensic_Break_Encase.pdf) is broken. Apparently the domain registration expired. I think we should wait a few days to see if it gets fixed, then remove the link if it hasn't been fixed.
Does anyone have a copy of the pdf file that we could put someplace else?