Notifications
Clear all
Topic starter
09/04/2010 12:44 am
how to analyse page file in xp using encase
09/04/2010 12:51 am
Search.
)
Cheers!
farmerdude
09/04/2010 2:07 am
What are you looking for, specifically?
The pagefile is unstructured, in that it doesn't follow a format similar to a file system.
I've used grep(), or run strings piped through find. You may be able to run foremost or scalpel, and recover either portions of files, or smaller ones.