Exam Essentials
Understand how EnCase organizes its workspace. Understand the Home screen and explain how to open and create cases. Explain how to add evidence or browse evidence from the Home screen. Understand the Evidence tab entries view. Explain the Tree pane, Table pane, and View pane as to what data is displayed in each and how they interact. Describe the Table, Gallery, and Timeline views from the Table pane. Explain how to launch the Disk view and explain its purpose and features. Explain the concept of multidimensional data and how it can be viewed in the View pane. Be able to list which tabs are found in the View pane.
Understand how EnCase stores configuration and case data. Explain how and where EnCase creates paths and filenames ...