Hi All ,
IIRC if the format itself is chnaging as in the case of evtx would it work just by adding a custom signature .Also is there a streaming media type that it currently recovered by PhotoRec ? I was planning to base my solution on the basis of code existing already for binary stream type of ...
Search found 3 matches
- 28 Apr 2012, 06:18
- Forum: File undelete
- Topic: Regarding windows evt File
- Replies: 3
- Views: 11377
- 28 Apr 2012, 01:04
- Forum: File undelete
- Topic: Regarding windows evt File
- Replies: 3
- Views: 11377
Re: Regarding windows evt File
Thanks Fionna ,
Thats very helpful tips . The problem was however different . Any I never guessed it could happen
MS has this tool called wvutil which can convert evtx to evt .But that conversion is bogus as it does not change the header info . Their tool LogParser is able to detect it becuase ...
Thats very helpful tips . The problem was however different . Any I never guessed it could happen
MS has this tool called wvutil which can convert evtx to evt .But that conversion is bogus as it does not change the header info . Their tool LogParser is able to detect it becuase ...
- 26 Apr 2012, 01:55
- Forum: File undelete
- Topic: Regarding windows evt File
- Replies: 3
- Views: 11377
Regarding windows evt File
I was trying to use photorec 6.13 (windows 7 64 bit and 32 Bit both ) and trying to recover event logs win7 event logs are evtx file soI used the wvutil tool to convert them into evt . Then I delete them and run Photorec but its does not show up .jpg and other formats work fine
My question is that ...
My question is that ...