The farmer boot CD includes a tool to extract data from pagefile.sys. www.forensicbootcd.com
Niall. Stefan Kelm wrote: > Folks, > > are there tools other than grep, strings, etc. that > allow me to analyze a windows swap file (pagefile.sys)? > > Cheers, > > Stefan. > > -------------------------------------------------------- > Stefan Kelm > Security Consultant > > Secorvo Security Consulting GmbH > Ettlinger Strasse 12-14, D-76137 Karlsruhe > > Tel. +49 721 255171-304, Fax +49 721 255171-100 > [EMAIL PROTECTED], http://www.secorvo.de/ > ------------------------------------------------------- > PGP Fingerprint 87AE E858 CCBC C3A2 E633 D139 B0D9 212B > >
