Table of Exercises
Exercise 1.1 Examining the Partition Table 23
Exercise 2.1 Viewing FAT Entries 55
Exercise 3.1 First Response to a Computer Incident 112
Exercise 4.1 Previewing Your Own Hard Drive 162
Exercise 5.1 Understanding How EnCase Maintains Data Integrity 213
Exercise 6.1 Navigating EnCase 302
Exercise 7.1 Searching for Data and Bookmarking the Results 414
Exercise 8.1 Performing a File Signature Analysis 445
Exercise 9.1 Windows Artifacts Recovery 558
Exercise 10.1 Partition Recovery 587
Exercise 10.2 Conducting Email Examinations 617
Introduction
This book was designed for several audiences. First and foremost, it was designed for anyone seeking the EnCase Certified Examiner (EnCE) credential. This certification has rapidly grown ...
Get EnCE EnCase Computer Forensics: The Official EnCase Certified Examiner Study Guide, 3rd Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
