Title
#file-carving
d

Daniel

10/19/2022, 10:31 PM
Hey guys - anyone had success is carving locked files? For instance - carving the Amcache.hve pops a "SHARING_VIOLATION" (in procmon). Returns an empty file