Windows Memory and ROT13 and ROT(-29)

General (Technical, Procedural, Software, Hardware etc.)

2 Posts

2 Users

0 Reactions

659 Views

RSS

erowe

(@erowe)

Estimable Member

Joined: 18 years ago

Posts: 144

Topic starter 01/10/2010 9:15 pm

Just wondering if anyone had info or source material on Windows memory dumps and ROT13 (filenames and paths?) and ROT(-29) (file data?).

Does anyone know of a tool that I can use to convert a text string to ROT(-29) with? I've Googled around but haven't found anything.

Also, does anyone know a way that ROT13 or ROT (-29) searches be done in EnCase?

http//forensiczone.blogspot.com/2010/09/mystery-of-rot-29.html

Quote

Hujarl

(@hujarl)

Active Member

Joined: 15 years ago

Posts: 17

01/10/2010 9:53 pm

Try using the following Perl Script from the Perlmonks website -

http//www.perlmonks.com/?node_id=262025

Note that you'll need to modify the ROT settings a bit for your ROT(-29) conversion.

Let us know if that works.

Cheers!

ReplyQuote

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed