SANS Digital Forensics and Incident Response Blog: Author - dlassalle

Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap

The latest version of the SIFT 2.12contains a few scripts I wrote, and Rob asked me to write a post for the blog going over their functionality. The scripts add on to the functionality provided by The Sleuth Kit's srch_strings to provide additional information on string matches and automatically carve out matching files or blocks. … Continue reading Digital Forensic SIFTing: String Searching and File Carving using srch_strings_wrap