Difference between pages "Dd rescue" and "Microsoft Office"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
(External Links)
 
Line 1: Line 1:
{{Infobox_Software |
+
{{expand}}
  name = dd_rescure |
+
  os = {{Linux}}|
+
  genre = {{Disk imaging}} |
+
  license = {{GPL}} |
+
  website = [http://www.garloff.de/kurt/linux/ddrescue/ www.garloff.de/kurt/linux/ddrescue/]
+
}}
+
  
'''dd_rescure''', is an an advanced evolution of [[dd]], a command line program that has been ported only for UNIX/Linux. The program uses a complex series of flags to allow the user to image or write data from and to [[raw image file|raw image files]]. Like [[dcfldd]], the program makes an effort to keep the user apprised of the status of the current operation.
+
== EventLogs ==
 +
As of Office 2010 related Office Alerts EventLog:
 +
<pre>
 +
C:\Windows\System32\winevt\Logs\OAlerts.evtx
 +
</pre>
  
== Sample usage ==
+
== See Also ==
 +
* [[Microsoft Office File formats]]
  
Here is a common dd_rescue command:
+
== External Links ==
 +
* [http://dfstream.blogspot.com/2014/01/ms-excel-2013-last-saved-location.html MS Excel 2013 Last Saved Location Metadata], Jason Hale, January 12, 2014
  
'''UNIX/Linux'''
+
[[Category:Analysis]]
 
+
<pre>$ dd_rescue /dev/hda myfile.img</pre>
+
 
+
==  Cautions ==
+
 
+
Unlike regular [[dd]], dd_rescue does not use the command line arguments <tt>if</tt> or <tt>of</tt>.
+
 
+
== See also ==
+
 
+
* [[aimage]]
+
* [[Blackbag]]
+
* [[dcfldd]]
+
* [[dd]]
+
* [[sdd]]
+

Revision as of 16:26, 13 January 2014

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

EventLogs

As of Office 2010 related Office Alerts EventLog:

C:\Windows\System32\winevt\Logs\OAlerts.evtx

See Also

External Links