i have a USB partition just for practice and i am searching by string grep -bai “bill” USBDevice.001 and i get a result as 177246:>>>>> Hi Bill,. How do i go forward with finding the file that holds this info ? fsstat shows
Thanks in advance.
i have a USB partition just for practice and i am searching by string grep -bai “bill” USBDevice.001 and i get a result as 177246:>>>>> Hi Bill,. How do i go forward with finding the file that holds this info ? fsstat shows
Thanks in advance.
I read that this gets the file but does not work for me 177246-(2048*512))/4096 gives a number -212 and 'ifind -d 212 USBDevice.001 gives 34-128-1 but icat USBDevice.001 34 gives unreadable content.
Is 2048 the correct sector offset to the NTFS partition? What does mmls show as a sector start?