Difference between pages "Strings" and "Talk:Encase hash files"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
m
 
(New page: Does anybody know if the file format changed for EnCase version 6? ~~~~)
 
Line 1: Line 1:
Strings is a program that prints out any [[ASCII]] or [[Unicode]] strings in the input file. Forensic examiners can use strings to get a sense of the functionality of an unknown program. User prompts, error messages, and status messages can give hints, but should not be used as proof or lack or any functionality.
+
Does anybody know if the file format changed for [[EnCase]] version 6? [[User:Jessek|Jessek]] 08:48, 27 February 2007 (PST)
 
+
Most [[Linux]] distributions and other UNIX-like operating systems have a strings program included. There is a [[Windows]] version of strings by [[Microsoft|Microsoft's]] [[Mark Russinovich]]. Note that the Windows version prints an output header and searches for both ASCII and Unicode strings by default.
+
 
+
== External Links ==
+
* [http://www.microsoft.com/technet/sysinternals/Miscellaneous/Strings.mspx Strings for Windows]
+
* [http://www.openbsd.org/cgi-bin/man.cgi?query=strings Manual page for BSD version of strings]
+

Revision as of 11:48, 27 February 2007

Does anybody know if the file format changed for EnCase version 6? Jessek 08:48, 27 February 2007 (PST)