Chapter 14 Forensics Investigation Using EnCase

Exam objectives in this chapter:

image What Is an Evidence File?

image Hashing

image How You Acquire a File Image

image Configuring EnCase

image The Searching Ability of EnCase

The Bookmark

Recovering Deleted Files/Folders in ...

Get The Official CHFI Study Guide (Exam 312-49) now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.