Solved

How to find an email or document in a PC using a specific unique piece of txt ?  (using a hex editor)

Posted on 2013-01-16
3
156 Views
Last Modified: 2013-01-20
Is there  away?
I thought I saw it being done once years ago.

In this case its an email.
0
Comment
Question by:fcek
3 Comments
 

Author Comment

by:fcek
ID: 38784293
say for exampl I knew a document somewhere on the c drive contained the text

"123456789"

> is there a way to search the c: drive for this?

> is ther a way to search through a .pst file using a hex editor as well?
0
 
LVL 52

Expert Comment

by:Manpreet SIngh Khatra
ID: 38786824
When you say is the Subject of the email as 123456789 or its a body content if so it might not be helpful as Windows search can only search for Words and not content in the files

- Rancy
0
 
LVL 43

Accepted Solution

by:
Davis McCarn earned 500 total points
ID: 38787245
As long as the PST is not encrypted, you can use a hex editor in sector mode to simply search the drive for as specifc and unique a string as possible. Searching for "john.brady@somecompanyinc.com" will find every E-Mail (to or from), his entry in most address books, any file containing his E-Mail address, and any temporary files created.
When you find an E-Mail, they can usually be read just like a telegram.
Older documents can also be found; but, newer unicode items may be much harder as every odd character will be 00 (i.e. j o h n . b r a d y @)
I have done forensics since 1979 and have used Winhex for the last ten years.  It does a great job of building a list of the strings you search for and then lets you step through the list to examine the hits.
0

Featured Post

3 Use Cases for Connected Systems

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, testing some more, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to update Firmware and Bios in Dell Equalogic PS6000 Arrays and Hard Disks firmware update.
The article will include the best Data Recovery Tools along with their Features, Capabilities, and their Download Links. Hope you’ll enjoy it and will choose the one as required by you.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now