Notifications
Clear all
Topic starter
08/04/2010 11:44 pm
how to analyse page file in xp using encase
08/04/2010 11:51 pm
Search.
)
Cheers!
farmerdude
09/04/2010 1:07 am
What are you looking for, specifically?
The pagefile is unstructured, in that it doesn't follow a format similar to a file system.
I've used grep(), or run strings piped through find. You may be able to run foremost or scalpel, and recover either portions of files, or smaller ones.