In DFRWS 2016 USA, I was Speaker on this topic :
Recovery method of deleted records and tables from ESE Database
In my paper, there is the following phrase :
we developed a tool to extract normal records in the ESE database and recover deleted records, without using the database API.
(O M I T)
EDBForensic.py <Input Path> <Output Path>
Now, I am converting this program from CLI to GUI.
This program will be released later this month (about Sep. 2016)
As soon as possible, I will update it. Thanks!
Can you share the python version with me? would love to see it .. david.nides@gmail.com
답글삭제