Hi all, I'm trying to do some semipro (in between amateur and pro ;-) ) forensics investigation on a Windows PC. Mainly trying to get details related to web browsing with IE wherein the Histories have been removed, cache flushed, etc.
So far, I've tried ntfsundelete and foremost. I'll be trying PhotoRec sometime today. Any other tools I might try? --- mike t. _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
