EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition

EnCase Case Files

A case file is created when you first create a case in EnCase 7. Prior to EnCase 7, you had to manually create the various folders needed for EnCase to store various case-specific files. Starting with EnCase 7, you need only to accept the default base case folder or point to another location. EnCase 7 then creates the various subfolders as shown in Figure 5-13. Figure 5-14 shows the screen that opens when you tell EnCase to create a new case. You can see the default base case folder. Since I named this case BrandNewCase, you can see that it creates a folder by that name under the base case folder, as shown in the full case path entry. Also, if you look in Figure 5-13, you will see that EnCase now creates the case file for you ...