±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35894
New Yesterday: 0 Visitors: 110

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Carving taskflow.shellactivities in X-Ways?

Forensic software discussion (commercial and open source/freeware). Strictly no advertising.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


Carving taskflow.shellactivities in X-Ways?

Post Posted: Jun 12, 19 10:38

Hi all,

Has anyone had any luck with carving these entries out with X-Ways? I've been attempting to create a GREP for simultaneous search, but to be honest I'm not well versed enough in creating them to get one that works perfectly.

Ideally it needs to select all data between each instance of the hex values D214 and CA500000.  

Page 1 of 1