I used to conduct raw search in EnCase v6, and I'd like to see if EnCase v7 raw search could hit keywords inside compound files or not. You won't believe it~search results is 0 but those keywords do exist inside compound files...Let my show you my test as below:
Scenario:
Two compound files, one is a docx and the other is a xlsx. Two keywords, one is "password",and the other is "密碼".
1. Evidence Processing( expand compound files option is checked) completed.
2. word.docx
3. excel.xlsx
4. Conduct raw search
5.Search result = 0
As you could see that those keywords do exist in those two compound files, but no any hits...
【推荐】编程新体验,更懂你的AI,立即体验豆包MarsCode编程助手
【推荐】凌霞软件回馈社区,博客园 & 1Panel & Halo 联合会员上线
【推荐】抖音旗下AI助手豆包,你的智能百科全书,全免费不限次数
【推荐】博客园社区专享云产品让利特惠,阿里云新客6.5折上折
【推荐】轻量又高性能的 SSH 工具 IShell:AI 加持,快人一步