"Forensic Toolkit ... scans a hard drive for every printable character string. It looks in documents, in the Registry, in e-mail, in swap files, in deleted space on the hard drive... everywhere. And it creates a dictionary from that & feeds it into PRTK"