Notifications
Clear all
Topic starter
11/09/2018 1:49 pm
Hi,
I am currently trying to identify the best way to carve Microsoft OneNote files from a forensic image, is there any automated processes out there such as EnScripts?
We often use AXIOM for things like this however it appears this is not one of the supported document types and there are no custom artefacts either.
Or does anyone have any GREP searches or similar which will help recover .one files.
I have found some within the OneNote backup however these are not the ones we require.
Thanks in advance.