[sleuthkit-users] TSK Unicode support

[youcef b. <ybi...@ya...>]

Hi,
Am I right in conlcuding that TSK doesnt support
UNICODE not just at the presentation layer i.e. is not
capable of converting the retreived string into a
format that preserves their state like UTF8, but also
at the analysis layer because the underlying tools
used dont support UNICODE.

for instance the informer 8 article says that Autopsy
will not find UNICODE strings because it uses the
'string' command which displays only ASCII strings. So
running 'grep' with any regular expression is futile
afterwrds as the damage is already done.



	
	
		
___________________________________________________________ 
Yahoo! Messenger - NEW crystal clear PC to PC calling worldwide with voicemail http://uk.messenger.yahoo.com