LinEn Acquisitions

LinEn, or EnCase for Linux, is a new feature of EnCase 5 and newer versions. Since EnCase 6, the DOS version of EnCase (EN.EXE) is no longer provided, and you will have only LinEn available. LinEn is similar to EnCase for DOS, but it offers all the advantages of running under Linux. DOS is a legacy 16-bit operating system, whereas Linux, like Windows, is a 32-bit or 64-bit operating system. Thus, you get tremendous performance advantages using LinEn compared to EnCase for DOS.

Mounting a File System as Read-Only

Unlike DOS or Windows, Linux enables you to manually select whether you want to mount a file system as read-only. In doing so, you are able to manually mount target evidence media in a write-protected manner, protected ...

Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.