O'Reilly logo

EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition by Steve Bunting

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

FastBloc SE Acquisitions

Beginning with EnCase 7, FastBloc SE is part of the basic feature set and is no longer an added-cost option.

About FastBloc SE

With this version of FastBloc, SE, you can use special drive controller software in EnCase to control reads and writes to attached evidentiary media. FastBloc SE can control writes to Plug and Play drives on USB, FireWire, and SCSI channels.

HPA and DCO
Earlier in this chapter, I discussed HPA and DCO, which are special protected areas of a hard drive that are ordinarily hidden from view. As you’ll recall, to view them in EnCase for DOS, you had to use the direct access mode.
With FastBloc SE, HPA and DCO support is present as long as the controller card in the forensics machine is ATA-6 ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required