Finding deleted ms documents with Encase 4.2


Dec 31, 2006
3,405
0
#2
There are a number of EnScripts available to locate MS documents. There are also tools like DataLifter that work on EnCase evidence files. A quick Google on EnScript will give you more info than you need.
 
Sep 2, 2004
70
6
#3
PreferredUser said:
A quick Google on EnScript will give you more info than you need.
I just did that, and found a lot of links...all that have to do with tools to convert Adobe PDF files to postscript documents.

If I were the OP, I'd start with the EnCase user's forum...you can register there using your dongle number. If that doesn't work, reach out to Lance at forensickb.com...he may be able to help you.
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu