Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20121

General Discussion: SyncToy v2.1

$
0
0
Hi all, Does anyone have a solution to parse SyncToy (Microsofts free syncing tool) .DAT files? A sync process was carried out by the owner of a laptop and shortly afterwards some of the source data was wiped. The other medium in the sync is not available. However, there are two 30MB DAT files present in the SyncToy folder that under a quick examination appear to contain lots of full path listings of files amongst other hex data. It would be good to parse these to adjudge what was potentially copied. Many thanks Shep

Viewing all articles
Browse latest Browse all 20121