CHAPTER
9
Keywords and Searching
We’ve spent time reviewing the Case Analyzer and the Evidence Processor modules. These are great for helping you get an initial feel for what was going on with the case. However, when faced with the volume of evidence that many of today’s cases involve, the examiner also needs other tools to find clues. When looking for needles in such a large haystack, we have a number of tools at our disposal. They include performing keyword searches and building filters and conditions. We will look the search options in depth in this chapter, and filters and conditions in the next chapter, so that you will have a thorough understanding ...
Get Computer Forensics and Digital Investigation with EnCase Forensic v7 now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
