Computer Forensics and Digital Investigation with EnCase Forensic v7

APPENDIX

C

Sample Run Books

As promised, these are the step-by-step Run Books that correspond with the exercises we went through in each chapter. I have indicated the chapter where you can find the descriptive text as a cross-reference. While many of these may be ready for use as-is, you should always look at them first and make sure that they are in line with the practices and procedures of your organization. These are included as templates and should form the basis for your own customizations.

Creating a New Case (Chapter 2)

  1.  Launch EnCase. ...