| 摘要 |
A computer-implemented method and program for separating one or more selected file constituents from a compound file (such as a mail file) that contains a plurality of file constituents each containing one or more native attributes. The file constituents are stored in a non-individually-manipulable manner in the file. The method comprises the steps of: creating a list identifying one or more selected file constituents; creating a forensic copy of the compound file; and using a functional module, segregating from the copy of the compound file the file constituents on the list, without removing them from the forensic file and without changing any native attribute of a file constituent. The segregation step is performed by deleting from the forensic copy all file constituents not present on the list. If desired, the selected file constituents identified on the list may be grouped into two or more categories.
|
