Computer Forensics and Digital Investigation with EnCase Forensic v7

PART

II

Beginning with EnCase Forensics

Up to this point, we’ve been going over the basics of preparing for the forensic function, installing the software, and talking about how the EnCase interface works. Now it is time to dig in and start using the product in a case study, so you can see how to accomplish the typical tasks associated with performing a digital investigation. You are introduced to the case study we will be using and the investigative questions you will want to answer.

Chapter 4 covers adding the various forms of evidence that EnCase supports. The most common methods are covered in depth so you will be prepared to add the evidence ...