Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20107

General Discussion: Trying to gather evidence from chat fragments in pagefile

$
0
0
Yes, nearly impossible. The paging file is made up of memory pages copies from active applications and the operating system. The pages from different applications are mixed up, so pages might not be sequential. Even within a page the data might not be sequential in time or encoded, depending on the application and how it stores the data. Also don't expect the paging file to contain a full record of anything. It will be a few fragments at best.

Viewing all articles
Browse latest Browse all 20107

Trending Articles