Re: [sleuthkit-users] Examining RAID-5 with only 1 drive

[DePriest, J. R. <jrd...@gm...>]

On 11/10/06, Simson L. Garfinkel's Treo 700p  wrote:
- - - - - - - - - - 8< - - - - - - - - - - - - - - - - - - - -
> >Brian's book claims that I might have luck with a simple keyword
> >search, but has anyone had any experience to back it up?
>
> Yes, but it depends on what you are looking for. What kinds of object are
> you looking for? Word file? JPEG? Incriminating sentence?
- - - - - - - - - - - - - - - - - - - - - >8 - - - - - - - - -

Most likely, the information would either be contained in some sort of
email file, HTML file, or plain-text file.

-Jason

-- 
+ + + NO CARRIER