Difference between pages "Strings" and "Talk:Encase hash files"

Revision as of 11:48, 27 February 2007

Does anybody know if the file format changed for EnCase version 6? Jessek 08:48, 27 February 2007 (PST)

@@ Line 1: / Line 1: @@
-Strings is a program that prints out any [[ASCII]] or [[Unicode]] strings in the input file. Forensic examiners can use strings to get a sense of the functionality of an unknown program. User prompts, error messages, and status messages can give hints, but should not be used as proof or lack or any functionality.
+Does anybody know if the file format changed for [[EnCase]] version 6? [[User:Jessek|Jessek]] 08:48, 27 February 2007 (PST)
-Most [[Linux]] distributions and other UNIX-like operating systems have a strings program included. There is a [[Windows]] version of strings by [[Microsoft|Microsoft's]] [[Mark Russinovich]]. Note that the Windows version prints an output header and searches for both ASCII and Unicode strings by default.
-== External Links ==
-* [http://www.microsoft.com/technet/sysinternals/Miscellaneous/Strings.mspx Strings for Windows]
-* [http://www.openbsd.org/cgi-bin/man.cgi?query=strings Manual page for BSD version of strings]