EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition

EnCase Backup Utility

The EnCase backup utility made its debut in EnCase 7.04 in May 2012. With its release, you can forget about .cbak files and the old way of backing up EnCase case files. In its place is a robust backup engine that will back up the following:

• Case file
• The contents of your case file, except for the following:
  • Temp folder
  • Export folder
  • Evidence files (.e01, .ex01, .l01, and .lx01)

• Primary evidence cache (only those cache files referenced in the case being backed up)
• Secondary evidence cache (only those cache files referenced in the case being backed up)
• Metadata for all files in backup (timestamps, file sizes, and so on), which are stored, among other data, in a SQLite database situated in the root of the backup path. ...