O'Reilly logo

Computer Forensics and Digital Investigation with EnCase Forensic v7 by Suzanne Widup

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

CHAPTER
7
image
Further Inspection
In the last chapter, we started out looking at the modules that the EnCase Evidence Processor provided. We began the process of looking at the results and documenting the basic elements of the case. We continue the initial documentation of the system as we go through the modules that we’ve processed. Even if you don’t find that everything you document is directly relevant to reconstructing the events in question, it is a good practice to document the basic state of the system when it was imaged. Sometimes this provides good leads to work on later down the road. It is a sign that the investigator has done a thorough ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required