more on disk searching

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Regarding my previous posts, I have now found out that the police used
a program called ENCASE; I've checked this out but I'm afraid it's a
bit beyond me. Sorry for the repetition but can someone clarify. Let us
suppose they use this program to search for the phrase "Dear Mr Smith",
will they be able to find it without turning on the computer and if it
is written in WORD, WordStar, WordPERFECT, Excel, encoded in
QuickBASIC, DBASE, or any of the above encoded and/'or deleted?

How long would it take to find such a phrase?


Re: more on disk searching

Quoted text here. Click to load it

I think I mentioned EnCase to you in one of my earlier posts, but regardless
of whether I did or didn't.  Yes.  EnCase can search the hard drive for
phrases without turning on the computer.  Yes.  EnCase can search the entire
hard drive, including files that have been deleted, slack space, etc.  In
summary if the phrase has ever been written, it's very probable EnCase will
find it on the hard drive.

FWIW I am trained in using EnCase and we (my company) own a licensed

Best regards, from Don Kelloway of Commodon Communications
Visit to learn about the "Threats to Your Security
on the Internet".

Re: more on disk searching

Quoted text here. Click to load it

Yes. And a simple grep -rli $TERM / will do.

Quoted text here. Click to load it

From seconds to minutes.

At first there was the word. And the word was Content-type: text/plain

Site Timeline