Re: [sleuthkit-users] Examining RAID-5 with only 1 drive

[Simson G. <si...@ac...>]

>
> So I am extracting strings from the partition labeled 'Hibernation'
> and hopefully that will be good enough.
>
Why are you extracting from the Hibernation partition and not from  
the entire physical device?